Triage OpenClaw security advisories and GHSA reports with shipped-tag proof.
npx skills add https://github.com/zhcndoc/openclaw --skill security-triage-zhcndoc
Please help me install this Agent Skill. Skill: security-triage Source: https://github.com/zhcndoc/openclaw/tree/main/.agents/skills/security-triage Command: npx skills add https://github.com/zhcndoc/openclaw --skill security-triage-zhcndoc
Triage OpenClaw security advisories, drafts, and GHSA reports with shipped-tag and trust-model proof.
Run the security-triage workflow on a new advisory to determine the proper maintainer action.
High-intent search queries and answers about installing and using this skill.
To triage GitHub security advisories, apply the security-triage workflow to verify canonical states, draft maintainer-ready decisions, and align outcomes with SECURITY.md guidelines and trust-model proofs.
A trust-model proof in security advisory review validates the advisory's shipped-tag and canonical state through structured verification steps, ensuring evidence-based conclusions before updating maintainer statuses or closing issues.
Draft maintainer-ready decisions for GHSA reports by following the explicit Review Method steps and Required Reads, which enforce a structured decision process to generate consistent hardening recommendations and status updates.
Yes, the triage process maintains strict alignment with SECURITY.md guidelines by verifying canonical repository states and applying evidence-based conclusions before closing or keeping security advisories open.
Automated security advisory triage requires explicit Required Reads and canonical state verification before closing issues, meaning it cannot bypass the structured decision process or skip evidence-based hardening recommendations without proof.
brikkoAITriage Brikko Studio security advisories against the documented trust model and shipped release state.
numman-aliAutomate GitHub issue and PR triage with actionable maintenance reports.
eleva-labsPlan security audits with checklists for dependency scanning and secret detection.
wuv-dreamguideTriage GitHub security advisories and GHSA reports into close, keep, or narrow decisions.
