Menu
分析 Dependabot 安全告警，评估安全风险并创建修复任务。当用户要求分析 Dependabot 告警、评估依赖漏洞风险时触发。参数为告警编号。
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/ModelEngine-Group/fit-framework --skill analyze-dependabotThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Based on SOC occupation classification
Showing SKILL.md
| name | analyze-dependabot |
| description | 分析 Dependabot 安全告警，评估安全风险并创建修复任务。当用户要求分析 Dependabot 告警、评估依赖漏洞风险时触发。参数为告警编号。 |
分析指定的 Dependabot 安全告警，评估安全风险并创建修复任务。
获取安全告警信息:
gh api repos/{owner}/{repo}/dependabot/alerts/<alert-number>
提取: severity, summary, package name, vulnerable version range, first patched version
创建任务目录和文件，基于 .agents/templates/task.md 模板。
分析受影响范围:
评估安全风险（可利用性、触发条件、影响程度）。
输出分析文档到 analysis.md。
更新任务状态。
提示下一步: plan-task 设计修复方案，或 close-dependabot 关闭告警。
注意: Critical/High 级别立即处理，Medium 计划处理，Low 可延后。