Triage OpenClaw security advisories with shipped-tag and trust-model proof.
npx skills add https://github.com/rigeoben/fairy --skill security-triage-rigeoben
Please help me install this Agent Skill. Skill: security-triage Source: https://github.com/rigeoben/fairy/tree/main/.agents/skills/security-triage Command: npx skills add https://github.com/rigeoben/fairy --skill security-triage-rigeoben
Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.
Review a GHSA advisory and draft a maintainer-ready closure comment.
High-intent search queries and answers about installing and using this skill.
Triage GHSA security advisories by applying a structured framework that validates shipped-state tags, checks the trust model, and verifies references to determine advisory status, close reasons, and required hardening actions.
Draft a maintainer-ready response by executing reproducible triage steps that generate citeable references, include optional hardening notes, and prevent scope escalation beyond documented advisory evidence.
Shipped-tag validation works by enforcing step-by-step evidence gathering and reference verification checks, ensuring maintainers accurately classify advisories as close, keep open, or keep open but narrow.
Yes, security triage classifies draft advisories as close, keep open, or keep open but narrow by guiding maintainers through a structured framework of required reads, evidence gathering, and reference verification.
Avoid automated advisory triage when lacking required reads, evidence, or reference verification data, as the process enforces trust-model checks and prevents scope escalation beyond documented advisory evidence.
zhcndocTriage OpenClaw security advisories and GHSA reports with shipped-tag proof.
enclawedTriage GitHub security advisories for Enclawed with closure decisions and maintainer-ready responses.
AradotsoHarden npm, pnpm, and Bun installs against supply-chain attacks.
brikkoAITriage Brikko Studio security advisories against the documented trust model and shipped release state.
