Claude Skills · DevOps & Infrastructure
Magpie Security Issue Import Via Forwarder
apache/magpieOptional sub-skill of `security-issue-import`, `security-issue-invalidate`, and `security-issue-sync` that handles the *relay/forwarder* case: a report that did not arrive directly from the reporter but was relayed onto `<security-list>` by an upstream broker (the ASF security team, a third-party disclosure platform, or an internal SOC). Runs after the parent skill's generic classification cascade, dispatches through adapters declared in `forwarders.enabled` per `tools/forwarder-relay/README.md`, applies the matched adapter's preamble-detect + credit-extract + reporter- addressing rules, and h...
At a glance
This skill is for DevOps & Infrastructure and helps you import security issues from upstream brokers, relay forwarded vulnerability reports, and extract reporter information from relayed disclosures.
git clone --depth 1 https://github.com/apache/magpie
cp -r magpie/skills/security-issue-import-via-forwarder ~/.claude/skills/security-issue-import-via-forwarder
Setup, runtime and requirements describe apache/magpie, the repo this skill ships in.
securityautomationincident-responseVulnerability DisclosureEmail Relay
Also in apache/magpie
View the repoFor a batch of findings from a non-security audit tool (`<audit-tool>` — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer...
Read-only audit of GitHub Actions workflow runner compatibility for one repository, an explicit repository set, one Apache project with mult...
Post-vote committer and PMC onboarding for Apache projects. Walks the nominator through every step from ICLA check to welcome announcement f...
Read-only GitHub activity card for a named contributor on <upstream>. Fetches PR authorship, code-review activity, issues, and PR/issue comm...
Read-only nomination brief for a named GitHub contributor on <upstream>. Aggregates GitHub activity across all contribution tracks plus main...
Measures contributor-sentiment signals on <upstream> over a configurable window: thread tone (first-response classification), time-to-first-...
Read-only readiness tracker that maps a contributor's GitHub activity against the adopter's PMC-declared committer or PMC thresholds and sur...
Read-only dependency vulnerability audit for one repository or a local checkout. Detects the project's dependency manager(s), runs the appro...
Read-only license audit of a project's direct and transitive dependency tree. Detects the dependency manager(s), resolves each dependency's...
Read-only flaky-test detection from GitHub Actions CI run history for one repository. Parses workflow run outcomes over a configurable windo...
Draft a single net-new *good first issue* on the configured `<upstream>` repo from one supplied candidate such as a known gap or a small mai...
Sweep the open `<issue-tracker>` backlog for existing issues that could be labelled as good first issues. Classifies each candidate as READY...
Other DevOps & Infrastructure skills
Generate an interactive bash wizard that walks a human through a manual procedure — third-party setup, a one-off migration, an A→B state tra...
Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wan...
Configure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before f...
Wire dependency-cruiser into a TypeScript repo so each package is a deep module — implementation hidden in subfolders, reachable only throug...
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-comm...
Manage Azure Container Registry via the az acr CLI including registries, images, cloud builds, ACR Tasks, authentication, tokens, geo-replic...