triage-vulnerabilities

Automate detection, triage, and remediation of security vulnerabilities across GitHub, GCP, Docker, and Linear.

88|19|Updated Apr 30, 2026
One-click install
npx skills add https://github.com/Heartcoolman/warp-cn --skill triage-vulnerabilities-heartcoolman
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: triage-vulnerabilities
Source: https://github.com/Heartcoolman/warp-cn/tree/main/resources/channel-gated-skills/dogfood/triage-vulnerabilities
Command: npx skills add https://github.com/Heartcoolman/warp-cn --skill triage-vulnerabilities-heartcoolman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, gcloud, docker, linear, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the triage and remediation of security vulnerabilities across multiple sources, reducing manual effort and speeding up the process.

Core Features & Use Cases

  • Automated Vulnerability Detection: Checks for vulnerabilities across GitHub Dependabot, GCP Artifact Registry, Docker Scout, and Linear security issues.
  • Vulnerability Triage: Identifies and deduplicates vulnerabilities across different sources.
  • Remediation Recommendations: Provides recommendations for fixing vulnerabilities and updating dependencies.
  • Use Case: For a developer responsible for maintaining a software project, this Skill can be used to automatically check for vulnerabilities in the project's dependencies and infrastructure.

Quick Start

Use the triage-vulnerabilities skill to check for vulnerabilities in the current project.

Frequently Asked Questions about triage-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability triage across GitHub Dependabot, GCP Artifact Registry, and Docker Scout?

Automating vulnerability triage across GitHub Dependabot, GCP Artifact Registry, and Docker Scout requires checking and deduplicating security issues across these multiple sources. This Skill automates that detection and remediation workflow to reduce manual effort.

What is the best way to deduplicate security vulnerabilities found in different infrastructure sources?

The best way to deduplicate security vulnerabilities from different infrastructure sources is to use an automated triage process that identifies matching issues across platforms like GitHub, GCP, and Docker. This Skill handles cross-source deduplication automatically.

Do I need GitHub, GCP, Docker, and Linear API access to run automated vulnerability remediation?

Yes, you need GitHub, GCP, Docker, and Linear API access to run automated vulnerability remediation. This Skill requires access to these specific platforms to detect security issues and provide dependency update recommendations across your software development workflow.

Can I use this vulnerability triage approach for software development and maintenance workflows?

Yes, you can use this vulnerability triage approach for software development and maintenance workflows. The Skill is specifically designed to check for vulnerabilities in a project's dependencies and infrastructure, applying directly to ongoing software maintenance tasks.

How does automated vulnerability detection handle dependency management and security scanning?

Automated vulnerability detection handles dependency management and security scanning by querying multiple sources like GitHub Dependabot and Docker Scout for known issues. It then triages the results to provide targeted remediation recommendations for updating vulnerable dependencies.