deal-with-security-advisory

by paperclipai/paperclip · Security & Compliance

Coordinates confidential GitHub Security Advisory handling, including private-fork fixes, CVE requests, and simultaneous publication with an immediate security release.

Lift—not yet benchmarked

Trustsecurity · quality · license · upkeep

Scan Saferisk 0/100

LicenseMITserved via MCP

What it does

Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.

#vulnerability-response#cve#github-security-advisory#patch-release#responsible-disclosure

Quality judgment

completeness

8.5/10

clarity

9.0/10

trigger quality

7.0/10

examples

7.0/10

structure

9.0/10

overall

8.5/10

Excellent, actionable end-to-end security advisory workflow with concrete gh/git commands, explicit confidentiality guardrails, human-in-the-loop steps clearly flagged, and verification steps. Minor deductions: trigger description is decent but narrow, and some placeholders (timeframe, patchedVersion) lack guidance on derivation.

Files (2)

LICENSE · 1.0 KBSKILL.md · 7.7 KB