메뉴
Clean up stale security-action Slack messages based on review signals (reactions, label removal, resolved threads). Use when the user wants to clean old notifications from a Slack channel.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Auto-detect top maintainers for each repo in an org and set the maintainers custom property via the GitHub API. Use when the user wants to populate or update maintainer metadata.
Validate metadata fields (author, source, category) in opengrep/semgrep YAML rule files. Use when the user wants to lint or check rule quality.
Delete Slack messages from a channel filtered by bot username and repository names. Use when the user wants to bulk-delete bot messages for specific repos.
Auto-dismiss Dependabot alerts matching configurable hotwords (e.g. DoS) or a GHSA/CVE dismiss list. Use when the user wants to bulk-dismiss low-priority Dependabot alerts.
Scan org repos for open Dependabot alerts at or above a severity threshold and build notification messages for maintainers. Use when the user wants to check or nudge about Dependabot vulnerabilities.
Fetch and parse a JSON config file from a GitHub repository. Use when the user wants to read a configuration file from a remote repo.
| name | cleanup-slack-messages |
| description | Clean up stale security-action Slack messages based on review signals (reactions, label removal, resolved threads). Use when the user wants to clean old notifications from a Slack channel. |
| argument-hint | [channel] |
| allowed-tools | Bash(node *) |
Delete stale security-action messages from a Slack channel based on review completion signals.
Run from the project root:
# Default channel (#secops-hotspots)
node run.js ./src/cleanupSecurityActionMessages.js --token=xoxb-... --githubToken=ghp_...
# Custom channel
node run.js ./src/cleanupSecurityActionMessages.js --token=xoxb-... --githubToken=ghp_... --channel="#security-alerts"
# Dry run (debug mode)
node run.js ./src/cleanupSecurityActionMessages.js --token=xoxb-... --githubToken=ghp_... --debug=true
| Parameter | Required | Default | Description |
|---|---|---|---|
--token | Yes | $SLACK_TOKEN | Slack bot token |
--githubToken | Yes | $GITHUB_TOKEN | GitHub PAT for PR queries |
--channel | No | #secops-hotspots | Slack channel name |
--debug | No | false | Log what would be deleted without deleting |
--defaultAssignees | No | - | Comma-separated fallback GitHub usernames |
A message is deleted if any of these signals are detected:
/cc'd person/cc'd personneeds-security-review label removed by a security assignee on the linked PRgithub-actions review threads resolved by a security assigneeReturns a number -- count of messages deleted (or count that would be deleted in debug mode).
.env file with SLACK_TOKEN and GITHUB_TOKENchat:write, channels:read, channels:history, reactions:read scopesrun.js entry point automatically loads .env credentials--debug=true first to preview what would be deleted