security-issue
Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.
来源信息
- 仓库
- xrplevm/node
- 最近来源活动
- 2026年4月29日 07:49
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 1,402
- 分支
- 33
安装方式
默认使用会先检查来源的 Prompt;你也可以切换为直接命令,或下载本地副本。
检查来源文件
决定是否安装前,请先阅读 SKILL.md,以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- security-issue
- description
- Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.
- disable-model-invocation
- true
- allowed-tools
- Bash(gh *) Read Grep
# Security Issue Skill
Create a security finding in `peersyst/security`. Gather the following information from the user or from context:
1. **Severity**: One of `critical`, `high`, `medium`, `low`, `info`
2. **Area**: The focus area (e.g., POA module, Authorization & access control, EVM integration, IBC & cross-chain, etc.)
3. **Title**: Short description of the finding
4. **Location**: File path and line numbers
5. **Finding**: Description of the vulnerability or concern
6. **Impact**: What could go wrong and under what conditions
7. **Recommendation**: Suggested fix or mitigation
8. **Evidence**: Code snippets, reasoning, or proof of concept (optional)
If any required field is missing, ask the user before proceeding.
## Before creating
Check for duplicates first:
```bash
gh issue list -R peersyst/security --label "repo:xrplevm/node" --state all --json number,title,labels,state -q '.[] | select(.title | test("KEYWORD"; "i"))'
```
Replace KEYWORD with a relevant term from the title. If a duplicate exists, inform the user and ask whether to proceed.
## Create the issue
```bash
gh issue create -R peersyst/security \
--title "[SEVERITY_UPPER] Title here" \
--label "repo:xrplevm/node,SEVERITY,pending" \
--body "$(cat <<'EOF'
## Area
<focus area>
## Finding
<finding description>
## Location
<file:line>
## Impact
<impact description>
## Recommendation
<recommendation>
## Evidence
<code snippets or reasoning>
EOF
)"
```
## After creating
Report the issue URL back to the user.
在 GitHub 查看