Magpie Security Issue Sync
apache/magpieSynchronize a security issue in <tracker> with the state of its GitHub discussion, the <security-list> mailing thread, and any <upstream> PRs that fix it. The skill gathers all relevant signals and proposes label / milestone / assignee / field / draft-email updates — applying only what the user has explicitly confirmed. Suggests the next step in the handling process and prints the CVE allocation link when a CVE is needed.
At a glance
This skill is for Support and helps you sync security issue with github discussion, coordinate security fixes across pull requests, and track security issue status across multiple platforms.
git clone --depth 1 https://github.com/apache/magpie
cp -r magpie/skills/security-issue-sync ~/.claude/skills/security-issue-sync
Setup, runtime and requirements describe apache/magpie, the repo this skill ships in.
securitygithubIssue TrackingVulnerability ManagementWorkflow Coordinationcve
Also in apache/magpie
View the repoFor a batch of findings from a non-security audit tool (`<audit-tool>` — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer...
Read-only audit of GitHub Actions workflow runner compatibility for one repository, an explicit repository set, one Apache project with mult...
Post-vote committer and PMC onboarding for Apache projects. Walks the nominator through every step from ICLA check to welcome announcement f...
Read-only GitHub activity card for a named contributor on <upstream>. Fetches PR authorship, code-review activity, issues, and PR/issue comm...
Read-only nomination brief for a named GitHub contributor on <upstream>. Aggregates GitHub activity across all contribution tracks plus main...
Measures contributor-sentiment signals on <upstream> over a configurable window: thread tone (first-response classification), time-to-first-...
Read-only readiness tracker that maps a contributor's GitHub activity against the adopter's PMC-declared committer or PMC thresholds and sur...
Read-only dependency vulnerability audit for one repository or a local checkout. Detects the project's dependency manager(s), runs the appro...
Read-only license audit of a project's direct and transitive dependency tree. Detects the dependency manager(s), resolves each dependency's...
Read-only flaky-test detection from GitHub Actions CI run history for one repository. Parses workflow run outcomes over a configurable windo...
Draft a single net-new *good first issue* on the configured `<upstream>` repo from one supplied candidate such as a known gap or a small mai...
Sweep the open `<issue-tracker>` backlog for existing issues that could be labelled as good first issues. Classifies each candidate as READY...
Other Support skills
Break a plan, spec, or the current conversation into a set of tracer-bullet tickets, each declaring its blocking edges, published to the con...
Implement a piece of work based on a spec or set of tickets.
Plan a huge chunk of work — more than one agent session can hold — as a shared map of decision tickets on your issue tracker, and resolve th...
Google Model Armor: Filter user-generated content for safety.
Manage customer support — track tickets, respond, escalate issues.
Integrates with Atlassian products to manage project tracking and documentation via MCP protocol. Use when querying Jira issues with JQL fil...