Triage GitHub security advisories with close/keep decisions and tag verification.
npx skills add https://github.com/Arry8/openclaw-edge --skill security-triage
Please help me install this Agent Skill. Skill: security-triage Source: https://github.com/Arry8/openclaw-edge/tree/main/.agents/skills/security-triage Command: npx skills add https://github.com/Arry8/openclaw-edge --skill security-triage
Triage GitHub security advisories for OpenClaw with high-confidence close/keep decisions, exact tag and commit verification, and a trust-model workflow to streamline vulnerability handling.
Load the SECURITY.md and the target GHSA, read the advisories and implicated code paths, and apply the triage criteria to draft a response.
High-intent search queries and answers about installing and using this skill.
Triage GitHub security advisories by verifying implicated code paths, shipped states, git tags, and commits to make high-confidence close or keep decisions. A structured checklist confirms whether the vulnerability actually affects your codebase.
Verifying git tags and shipped states prevents regressions by confirming whether the implicated code is actually released. Checking the advisory against the current codebase ensures you only keep or close issues based on deployed, vulnerable versions.
Reviewing GHSA reports involves reading SECURITY.md, inspecting the advisory, and verifying the shipped state using commands like git tag and npm view. This structured workflow confirms implicated code paths before drafting a maintainer-ready response.
Draft a maintainer-ready response by applying triage criteria after verifying tags, commits, and implicated code paths. The process includes optional hardening notes to address vulnerabilities and streamline communication for repository maintainers.
Security advisory triage requires reading SECURITY.md as the initial step to understand the project's security policies and reporting structure. Skipping this file bypasses the trust-model workflow needed for accurate vulnerability handling decisions.
Include hardening notes when the triage process confirms an active vulnerability requiring additional protective measures. These optional notes accompany the close or keep decision to help maintainers implement supplementary security safeguards.
wuv-dreamguideTriage GitHub security advisories and GHSA reports into close, keep, or narrow decisions.
BasedHardwareScore and prioritize GitHub issues using a triage formula and map results to Omi layers.
pertain99Triage GitHub security advisories with verified tag and commit checks.
wangqianCAITriage OpenClaw security advisories and GHSA reports by verifying shipped code paths.
