Triage GHSA security advisories using shipped-tag and trust-model proof.
npx skills add https://github.com/qkal/superbyte --skill security-triage-qkal
Please help me install this Agent Skill. Skill: security-triage Source: https://github.com/qkal/superbyte/tree/main/.agents/skills/security-triage Command: npx skills add https://github.com/qkal/superbyte --skill security-triage-qkal
Triage SuperByte security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof to help maintainers act confidently.
Review a new GHSA advisory and decide its disposition using the defined triage workflow.
High-intent search queries and answers about installing and using this skill.
To triage GitHub security advisories, you verify relevance by reading SECURITY.md, inspecting the GHSA body, and checking the shipped state via tags and npm versions to enforce a structured close or keep-open workflow.
The required process for reviewing GHSA drafts involves reading SECURITY.md, checking the GHSA details, and inspecting the current shipped state to meet precise closure criteria and avoid premature advisory closures.
No, you should review multiple GHSA reports one advisory at a time. This structured triage workflow guides single-advisory discussions to generate maintainer-ready comments and ensure rigorous hardening considerations.
Yes, the triage workflow checks npm versions and shipped tags to verify the current shipped state. This provides trust-model proof required to validate advisory relevance before maintainers act.
The close bar criteria for resolving security advisories requires verifying the GHSA body, SECURITY.md, and current shipped state to prevent premature closures and ensure maintainers act confidently with trust-model proof.
wuv-dreamguideTriage GitHub security advisories and GHSA reports into close, keep, or narrow decisions.
seasonmacAutomate triage decisions for GitHub security advisories with verification checks.
wangqianCAITriage OpenClaw security advisories and GHSA reports by verifying shipped code paths.
JOHNNYWHITEMIKETriage GitHub security advisories by verifying shipped code and trust models.
