SkillFeeder › 全部 Skill › 工程开发 › security-advisory

处理私报漏洞：建草稿卡、判责归属、修漏洞、发版、转为公开通告

security-advisory

security-advisory 是 SkillFeeder 收录的Agent Skill，来自 GitHub 仓库 modelcontextprotocol/servers。处理私报漏洞：建草稿卡、判责归属、修漏洞、发版、转为公开通告。适合安全响应负责人。场景是工程开发 · SDK/API。能做的事包括自动生成安全通告草稿卡片、准确判断漏洞归属（本库服务器或底层 SDK）、完成私有分支修复与版本发布。打开 GitHub 自行安装。

打开 GitHub

仓库
modelcontextprotocol/servers
场景
工程开发 · SDK/API
适合
安全响应负责人
类型
Skill

能做什么

原文简介

Take a privately reported vulnerability through this repo's security advisory flow: board it as a draft card, check whether the code is this repo's server or the SDK underneath, accept or reject, fix it in the private fork, release, publish, then turn the card into public tracking. Use when a vulnerability is reported privately; when deciding whether an advisory is ours to fix or belongs to an SDK

同场景推荐