Create security embargo policies and draft pre-disclosure notices for CNCF projects.
npx skills add https://github.com/castrojo/cncf-skills --skill security-embargo
Please help me install this Agent Skill. Skill: security-embargo Source: https://github.com/castrojo/cncf-skills/tree/main/skills/security-embargo Command: npx skills add https://github.com/castrojo/cncf-skills --skill security-embargo
This Skill helps CNCF project maintainers establish and manage a formal security embargo policy, ensuring coordinated vulnerability disclosure and protecting downstream distributors.
Use the security-embargo skill to create and maintain the security embargo policy for your project.
High-intent search queries and answers about installing and using this skill.
To create a security embargo policy, use this Skill to generate a comprehensive document that establishes pre-disclosure coordination agreements and protects downstream distributors before public vulnerability disclosure.
A security embargo policy is a formal agreement governing coordinated vulnerability disclosure. You need one when preparing to release a security patch for a widely used component to ensure downstream distributors are informed and prepared.
Yes, this Skill provides templates for drafting pre-disclosure embargo notices to distributors, ensuring they receive advance notification and can prepare their systems before public vulnerability disclosure.
The best way to manage CNCF vulnerability disclosure coordination is by establishing a formal embargo policy and using draft notice templates to secure communication channels with downstream distributors prior to public disclosure.
If your project lacks downstream distributors, the formal pre-disclosure coordination and embargo notification templates provided by this Skill are less critical, as coordinated vulnerability disclosure primarily protects distributing partners.
rampstackcoEstablish a security baseline for websites and web apps.
masharrattDistribute press releases to wire services via n8n webhooks.
VulcanNeuralDevAutomate GitHub security advisory workflows from discovery to publication.
rocklambrosDraft vulnerability disclosure policies and coordinated-disclosure materials with RFC 9116 security.txt output.
