deal-with-security-advisory
Coordinates confidential GitHub Security Advisory handling, including private-fork fixes, CVE requests, and simultaneous publication with an immediate security release.
Lift—not yet benchmarked
89
Trustsecurity · quality · license · upkeep
Scan Saferisk 0/100
LicenseMITserved via MCP
Saferisk 0/100scanner: sb-static v1 (SkillSpector integration is a seam)
No findings on this version.
Methodology: static pass over the pinned file tree — secret patterns, binaries, install hooks, URL allowlist comparison, allowed-tools breadth. Full methodology →