Menu
Fetch private GitHub Security Advisories (GHSA) for this repo using GitHub
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Updates project dependencies for npm and Go ecosystems, runs audits and tests, and reports issues for manual review. Use when the user asks to update dependencies, bump packages, run npm-check-updates, refresh go.mod, or perform routine dependency maintenance. Never commits or pushes.
Expose llms.txt, /openapi, and /mcp endpoints so LLMs and AI agents can discover and integrate with a web service. Use when adding AI/agent discovery surfaces, MCP server integration, OpenAPI exposure, llms.txt, AGENTS.md, or mcp-go setup to a Go (Connect/gRPC) or similar HTTP service.
Updates README headers to match a standard format, including project name, description, badges, and logo.
This skill defines a standard architecture for a services (jwr-soa-2.0 - ie, version 2.0 for the jwr organisation). This architecture includes guidelines for coding style, test-driven development, project layout, repo health, frontend and backend development, protocol design, and testing. The goal of this skill is to provide a consistent and maintainable structure for web service projects within the jwr organisation.
Git add, commit and push in one command
This is a simple testing skill.
| name | jwr-fetch-ghsa |
| description | Fetch private GitHub Security Advisories (GHSA) for this repo using GitHub |
Private or draft security advisories for this repo are repository-level, not global. The global advisory APIs do not return them.
This skill refers to the example repo OliveTin/OliveTin which has a mix of public and private advisories. Replace with your own repo as needed, by checking the git origin.
gh) installed and authenticated (gh auth status).gh api "/repos/OliveTin/OliveTin/security-advisories/GHSA-XXXX-XXXX-XXXX"
Replace GHSA-XXXX-XXXX-XXXX with the full advisory ID (e.g. GHSA-fwhj-785h-43hh).
Example with pretty-printed JSON:
gh api "/repos/OliveTin/OliveTin/security-advisories/GHSA-fwhj-785h-43hh" | jq .
gh api "/repos/OliveTin/OliveTin/security-advisories"
Returns all advisories for this repo (including draft/triage/private). Pipe to jq to filter or format.
Global REST API
gh api /advisories/GHSA-xxxx-xxxx-xxxx โ 404 for repo-only advisories.
GraphQL securityAdvisory(ghsaId: "...")
Resolves only global (published) advisories; returns null for repo-only/draft.
gh advisory view
Not available in all gh installs; when present, it typically queries global advisories only.
So for any GHSA that might be private or in triage/draft, use the repo path above.