Read and triage GitHub security advisories with tag and commit verification.
npx skills add https://github.com/Jnuso/OpenClaw --skill security-triage-jnuso
Please help me install this Agent Skill. Skill: security-triage Source: https://github.com/Jnuso/OpenClaw/tree/main/.agents/skills/security-triage Command: npx skills add https://github.com/Jnuso/OpenClaw --skill security-triage-jnuso
This Skill helps maintainers quickly evaluate GitHub security advisories, drafts, and GHSA reports for OpenClaw, delivering clear, actionable close or keep decisions with verified tag/commit checks and a structured reply template.
To begin triaging, run the triage workflow on a new advisory and follow the close/keep guidelines.
High-intent search queries and answers about installing and using this skill.
To triage GitHub security advisories, this Skill reads the GHSA body via API, verifies shipped state using tags and commits, and applies trust-model validation to produce a precise close or keep decision.
The best way to validate a GHSA report against your release is to inspect exact code paths and verify canonical references for tags and commits, ensuring the triage decision reflects the current product state.
Yes, this triage workflow supports draft security advisories, published GHSA reports, and SECURITY.md references to evaluate vulnerabilities and generate maintainer-ready outcomes.
You generate a maintainer-ready reply by completing the guided triage workflow, which produces a structured, copy-paste response template with optional hardening notes for the security advisory.
Yes, the security triage process verifies the shipped state by checking canonical references for tags, releases, and commit status before delivering a final, reply-ready close or keep decision.
A limitation of trust-model validation is that it relies on exact code-path inspection and canonical tag or commit checks, meaning decisions are constrained by the accuracy of the available repository references.
bitan-delFetch, verify, and publish GHSA advisories for OpenClaw repositories.
BasedHardwareScore and prioritize GitHub issues using a triage formula and map results to Omi layers.
dtsongManage GitHub issues, pull requests, releases, and repository status via gh CLI.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
