triage-security

Analyze Jira security issues for version impact and duplicate detection.

10|7|Updated Mar 18, 2026
One-click install
npx skills add https://github.com/RHEcosystemAppEng/sdlc-plugins --skill triage-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage-security
Source: https://github.com/RHEcosystemAppEng/sdlc-plugins/tree/main/plugins/sdlc-workflow/skills/triage-security
Command: npx skills add https://github.com/RHEcosystemAppEng/sdlc-plugins --skill triage-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the triage and remediation of security vulnerabilities, saving time and reducing the risk of human error in security workflows.

Core Features & Use Cases

  • Automated Triage: Use the skill to automatically analyze security vulnerability reports, determine affected versions, and identify duplicates.
  • Version Impact Analysis: Perform detailed analysis of affected product versions to determine the impact of vulnerabilities.
  • Remediation Task Creation: Create structured remediation tasks that can be consumed by other Claude Code skills for actual code fixes.
  • Use Case: For a newly reported CVE, use this skill to automate the initial analysis and creation of remediation tasks, reducing the time to respond to vulnerabilities.

Quick Start

Use the triage-security skill on a Jira issue with CVE-YYYY-XXXXX to analyze and remediate the vulnerability.

Frequently Asked Questions about triage-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability triage for Jira issues?

Automating security vulnerability triage for Jira issues involves analyzing reports to determine version impact and detect duplicates. This skill evaluates Jira issues containing CVEs and generates structured remediation tasks to reduce manual effort.

What is the best way to analyze CVE impact across affected product versions?

Analyzing CVE impact across affected product versions requires detailed version impact analysis to determine vulnerability scope. This skill performs that analysis automatically on Jira issues to quantify the impact of newly reported CVEs.

Do I need Jira access to automate vulnerability remediation tasks?

Yes, you need Jira access to automate vulnerability remediation tasks. The skill requires Jira issue access for CVE analysis and depends on project-specific configuration defined in your CLAUDE.md file.

Can I detect duplicate security vulnerabilities in Jira automatically?

Yes, you can detect duplicate security vulnerabilities in Jira automatically. The skill analyzes incoming security vulnerability reports to identify duplicates during the triage process, preventing redundant remediation efforts.

How do I create structured remediation tasks for newly reported CVEs?

Creating structured remediation tasks for newly reported CVEs involves analyzing the vulnerability and formatting the fix requirements. This skill generates structured remediation tasks that can be consumed by other Claude Code skills for actual code fixes.