sync-security-issue

Reconcile a security issue across tracker, GitHub PRs, and reporter thread.

79|76|Updated Apr 28, 2026
One-click install
npx skills add https://github.com/apache/airflow-steward --skill sync-security-issue
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sync-security-issue
Source: https://github.com/apache/airflow-steward/tree/main/.claude/skills/sync-security-issue
Command: npx skills add https://github.com/apache/airflow-steward --skill sync-security-issue

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reconciles a security issue across the tracker, GitHub PR references, and the reporter mailing thread to synchronize state, signals, and next steps in a safe, auditable way.

Core Features & Use Cases

  • Single-issue sync: gather issue state, track PR references, and reporter thread signals to propose concrete changes.
  • Bulk triage mode: run concurrent assessments for multiple issues and present a unified proposal for review.
  • Safeguards and links: enforce explicit user confirmation before applying changes, render tracker references as clickable links, and follow documented workflows.

Quick Start

Speak 'sync issue NNN' to start the coordination and review the proposed changes.

Frequently Asked Questions about sync-security-issue

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I synchronize a security issue across GitHub and external issue trackers?

It surfaces a consistent state and proposed actions by reconciling issue metadata from your tracker, GitHub PRs, and reporter threads, ensuring signals and next steps are aligned before applying changes.

How do I bulk triage multiple CVE issues at once?

Bulk triage mode runs concurrent assessments across multiple security issues to generate a unified proposal, allowing you to review and apply synchronized labels, milestones, and assignees in one batch.

Can I automatically update GitHub labels and milestones for security issues?

Yes, the skill proposes updates to labels, milestones, assignees, and CVE links, but it only applies these changes after you provide explicit confirmation to ensure safe and auditable modifications.

How do I ensure my security issue synchronization remains auditable and safe?

It enforces guardrails per AGENTS.md and renders tracker references as clickable links with clear provenance, ensuring all proposed state changes are auditable and require explicit user confirmation.

What is the best way to reconcile reporter thread signals with GitHub PR references?

Reconciling reporter threads with GitHub PRs involves gathering signals from both sources to propose concrete changes, ensuring your security tracker reflects accurate and up-to-date context.