skills.rest
mozilla
mozillaOFFICIAL
Explore all skills by this author →
WebsiteGitHub

sec-approval

Audit Firefox security patches against Fixing Security Bugs guidelines and draft Bugzilla sec-approval questionnaires.

1|Updated Mar 17, 2026
Search Tags:#compliance#phabricator#firefox#security-approval#patch-audit#bugzilla
One-click install
npx skills add https://github.com/mozilla/media-skills --skill sec-approval
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sec-approval
Source: https://github.com/mozilla/media-skills/tree/main/sec-approval
Command: npx skills add https://github.com/mozilla/media-skills --skill sec-approval

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps Firefox contributors prepare security approval requests by auditing local patches for policy compliance and drafting the Bugzilla questionnaire needed for review.

Core Features & Use Cases

  • Compliance Audit: Checks commit messages, comments, identifiers, tests, and Try usage against Firefox security guidelines.
  • Security Questionnaire Drafting: Produces branch impact, regression risk, backport, and landing-readiness answers in the exact Bugzilla format.
  • Bug and Patch Context Handling: Works from a local patch, an optional downloaded bug report, and repository history to infer affected branches and required approvals.
  • Use Case: A developer with a sensitive Firefox fix can use this Skill to verify the patch is safe to discuss publicly and generate a ready-to-post sec-approval comment.

Quick Start

Ask the sec-approval skill to review your local Firefox patch, audit it for security-guideline compliance, and draft the Bugzilla sec-approval questionnaire.

Frequently Asked Questions about sec-approval

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I draft a sec-approval request for a Firefox security patch in Bugzilla?▼

To draft a sec-approval request for a Firefox security patch, this skill audits your local git or jj changes against the Fixing Security Bugs guidelines and generates a ready-to-post Bugzilla questionnaire covering branch impact and regression risk.

How do I check if my Firefox code changes comply with security patch guidelines?▼

To check compliance, this skill inspects your local diff, commit messages, comments, identifiers, tests, and Try usage against Firefox security guidelines to ensure your patch is safe to discuss publicly before posting.

What do I need to generate a Bugzilla sec-approval questionnaire for a Firefox bug fix?▼

You need local git or jj changes and an optional bug report. The skill uses repository history to infer affected branches and required approvals across Beta, Release, and ESR channels.

Can I use this skill to analyze security patch impact across Firefox Beta, Release, and ESR branches?▼

Yes, this skill performs release-branch reachability checks and backport assessments on your local patch to determine branch impact across Firefox Beta, Release, and ESR versions.

How do I prepare a sensitive Firefox bug fix for public security review?▼

Preparing a sensitive Firefox bug fix involves auditing the local diff for policy compliance and drafting a markdown sec-approval comment with regression risk and landing-readiness answers ready for Bugzilla.

Does this skill work with both git and jj repositories for Firefox patch audits?▼

Yes, this skill applies to local changes in either git or jj repositories, inspecting the diff to audit security guideline compliance and draft the required Bugzilla sec-approval request.

Related Skills

Explore More Software Engineering Skills→
cryfscryfs
2.3k

jujutsu

Manage version control workflows with JJ, a Git-compatible system.

Official
Basic
mozillamozilla

uplift-request

Draft Firefox uplift approval requests for Beta, Release, and ESR bugs.

Official
Advanced
danielraffeldanielraffel
13

cmajor-external

Integrate an external Cmajor toolchain with Pulp for patch validation and artifact generation.

Community
Advanced
pytholicpytholic
2

pr-description

Generate a pull request description from the branch diff and PR template.

Community
Intermediate