Vuln Tracker

Monitor vulnerability lifecycle status in GitHub repositories via API calls.

Updated Jul 16, 2026
One-click install
npx skills add https://github.com/enuno/noesis-aeon --skill vuln-tracker-enuno
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Vuln Tracker
Source: https://github.com/enuno/noesis-aeon/tree/main/skills/vuln-tracker
Command: npx skills add https://github.com/enuno/noesis-aeon --skill vuln-tracker-enuno

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gh, jq, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive view of the vulnerability lifecycle in GitHub repositories, including PR and advisory status, PVR triage transitions, and pending-disclosure aging.

Core Features & Use Cases

  • PR & Advisory Status: Monitors the lifecycle status of all disclosures made by vuln-scanner.

  • PVR Triage State: Tracks the lifecycle of submitted PVRs, from triage to publication.

  • Disclosure-Queue Aging: Monitors the aging of pending vulnerability disclosures to ensure timely disclosure.

  • Use Case: As a security engineer, use this Skill to ensure that all PRs and advisories are on track and that vulnerabilities are disclosed in a timely manner.

Quick Start

Use the Vuln Tracker skill to check the status of PRs and advisories for the repository 'noesis-aeon'.

Frequently Asked Questions about Vuln Tracker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track vulnerability disclosure PR status in GitHub repositories?

Track vulnerability disclosure PR status in GitHub by monitoring the lifecycle of advisories and pending disclosures. This requires GitHub authentication tokens to handle API calls for checking PR and advisory progression.

What is the best way to monitor pending vulnerability disclosure aging?

Monitor pending vulnerability disclosure aging by tracking the time elapsed since submission to ensure timely publication. This approach helps security engineers identify stalled advisories needing immediate attention.

Do I need authentication tokens to track PVR triage state in GitHub?

Yes, you need GitHub authentication tokens to track PVR triage state because the process handles GitHub API calls. These tokens grant access to repository data needed for monitoring triage transitions.

Can I use Python and jq to monitor GitHub vulnerability lifecycles?

Yes, you can use Python for scripting and jq for data parsing to monitor GitHub vulnerability lifecycles. These dependencies process API responses to track PR status, PVR triage, and disclosure aging.

How do I check if a vulnerability scanner disclosure is on track for publication?

Check if a vulnerability scanner disclosure is on track by monitoring its PR status, PVR triage state, and pending-disclosure aging. This provides a comprehensive view of the repository's vulnerability lifecycle.

Why does monitoring GitHub vulnerabilities require local file operations?

Monitoring GitHub vulnerabilities requires local file operations to cache API responses and track lifecycle changes over time. This allows scripts to compare historical states for accurate disclosure aging calculation.