Skip to main content

security-issue

Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.

Informações da origem

Repositório
xrplevm/node
Última atividade na origem
29 de abril de 2026 às 07:49
Idioma detectado do SKILL.md
inglês
Estrelas
1.402
Forks
33

Opções de instalação

Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.

Revise os arquivos de origem

Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.

Exibindo SKILL.md

SKILL.md
Instruções da origem · Visualização somente leitura
name
security-issue
description
Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.
disable-model-invocation
true
allowed-tools
Bash(gh *) Read Grep
# Security Issue Skill Create a security finding in `peersyst/security`. Gather the following information from the user or from context: 1. **Severity**: One of `critical`, `high`, `medium`, `low`, `info` 2. **Area**: The focus area (e.g., POA module, Authorization & access control, EVM integration, IBC & cross-chain, etc.) 3. **Title**: Short description of the finding 4. **Location**: File path and line numbers 5. **Finding**: Description of the vulnerability or concern 6. **Impact**: What could go wrong and under what conditions 7. **Recommendation**: Suggested fix or mitigation 8. **Evidence**: Code snippets, reasoning, or proof of concept (optional) If any required field is missing, ask the user before proceeding. ## Before creating Check for duplicates first: ```bash gh issue list -R peersyst/security --label "repo:xrplevm/node" --state all --json number,title,labels,state -q '.[] | select(.title | test("KEYWORD"; "i"))' ``` Replace KEYWORD with a relevant term from the title. If a duplicate exists, inform the user and ask whether to proceed. ## Create the issue ```bash gh issue create -R peersyst/security \ --title "[SEVERITY_UPPER] Title here" \ --label "repo:xrplevm/node,SEVERITY,pending" \ --body "$(cat <<'EOF' ## Area <focus area> ## Finding <finding description> ## Location <file:line> ## Impact <impact description> ## Recommendation <recommendation> ## Evidence <code snippets or reasoning> EOF )" ``` ## After creating Report the issue URL back to the user.
Ver no GitHub