paperclipai/paperclip✦ 精选0°

deal-with-security-advisory

仓库创建 2026年3月2日最近提交 3 小时前SkillHot 收录 3 小时前

⬈ GitHub 仓库 ⬈ SKILL.md 原文件 ⬇ Raw 原始文件

▸ 精选理由

提供保密且合规的应急响应步骤，适合安全与维护团队使用。

▸ 风险提示

流程要求保密并在私有分支处理，操作需严格权限控制。

这个 Skill 做什么

处理公司机密的 GitHub Security Advisory 协同、修复及发布流程。

在确认安全漏洞后，负责私下协调 GitHub Security Advisory 的响应、私有修复分支、CVE 申报和紧急发布流程。遇到需要 triage、合并私有补丁或快速发补丁时就用。最重要的特点是严格保密：任何细节不能出现在公开提交、分支名或讨论里，整个流程都要私密处理。

▸ 展开 SKILL.md 英文原文

Handle confidential GitHub Security Advisory response for Paperclip. Use when coordinating advisory triage, private-fork fixes, CVE/publication steps, and immediate security releases.

Skill 开发管理安全应急机密通用

7.6w

Stars

1.4w

Forks

仓库内 Skill

积累中

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/paperclipai/paperclip/master/.agents/skills/deal-with-security-advisory/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/paperclipai/paperclip/master/.agents/skills/deal-with-security-advisory/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Security Vulnerability Response Instructions

## ⚠️ CRITICAL: This is a security vulnerability. Everything about this process is confidential until the advisory is published. Do not mention the vulnerability details in any public commit message, PR title, branch name, or comment. Do not push anything to a public branch. Do not discuss specifics in any public channel. Assume anything on the public repo is visible to attackers who will exploit the window between disclosure and user upgrades.

***

## Context

A security vulnerability has been reported via GitHub Security Advisory:

* **Advisory:** {{ghsaId}} (e.g. GHSA-x8hx-rhr2-9rf7)
* **Reporter:** {{reporterHandle}}
* **Severity:** {{seve

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有