openclaw-ghsa-maintainer

Automate OpenClaw GHSA advisory lifecycle with inspection, patching, validation, and publishing.

5|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/p-sree-sai-pavan/P.A.R.K.E.R --skill openclaw-ghsa-maintainer-p-sree-sai-pavan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: openclaw-ghsa-maintainer
Source: https://github.com/p-sree-sai-pavan/P.A.R.K.E.R/tree/main/gateway/.agents/skills/openclaw-ghsa-maintainer
Command: npx skills add https://github.com/p-sree-sai-pavan/P.A.R.K.E.R --skill openclaw-ghsa-maintainer-p-sree-sai-pavan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the lifecycle management of OpenClaw GHSA advisories, including inspection, patching, validation, and publishing, reducing manual error and ensuring policy compliance.

Core Features & Use Cases

  • Advisory inspection: Retrieve current GHSA advisory state and linked private fork details.
  • Guarded patching: Build and apply PATCH payloads in the correct sequence with safety checks.
  • Publish validation: Verify no open PRs in the private fork before state transition to published.
  • Auditable workflow: Generate and verify Markdown/JSON payloads and document actions.

Quick Start

Fetch the advisory, validate the private fork status, then patch and publish following the guided prompts.

Frequently Asked Questions about openclaw-ghsa-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate GitHub security advisory lifecycle management?▼

Automate GitHub security advisory lifecycles by using API-driven state transitions to inspect, patch, validate, and publish GHSA advisories, ensuring safe and auditable patch sequencing without manual intervention.

What's the best way to validate a private fork before publishing a GHSA advisory?▼

Validate a private fork before publishing a GHSA advisory by verifying that no open pull requests exist in the fork, ensuring patch payloads are correctly formed and safe for API-driven state transitions.

How does patch validation work for GHSA advisories?▼

Patch validation for GHSA advisories works by building and applying PATCH payloads in a correct sequence with safety checks, generating and verifying Markdown and JSON payloads to document and audit actions.

Can I use this to generate JSON and Markdown payloads for security advisory patches?▼

Yes, you can generate and verify JSON and Markdown payloads for security advisory patches, ensuring the outputs are correctly formed and auditable for governance workflows before applying API-driven state transitions.

Why should I check for open PRs before transitioning a security advisory to published?▼

Checking for open PRs before transitioning a security advisory to published prevents merging incomplete or unreviewed code, ensuring safe and auditable patch sequencing within the private fork.