github-security-agent

Use when asked to reduce GitHub security alerts across all active repositories in one selected profile.

Use when asked to remediate GitHub Dependabot alerts across the repositories defined in one selected profile.

Use when a remediation diff already exists and you need a policy decision for merged, opened_pr, blocked, skipped, or failed.

Use when you need a consistent run summary across remediation units, outcomes, and remaining blockers.

Use when you need to validate a selected profile, inspect the runtime contract, and map repository entries to local clone paths before any remediation work starts.

Use when asked to remediate allowlisted deterministic GitHub code-scanning alerts across the repositories defined in one selected profile.

Use when asked to inspect GitHub code-scanning alerts across the repositories defined in one selected profile.

Use when you need to triage open secret-scanning alerts, prepare deterministic cleanup PRs, and record required manual follow-up actions.