security-advisory-compat-enforcer

Was der Skill vermittelt

A maintainer skill for the gh-aw repository that turns a GitHub security advisory into a minimal edit of the repository's .github/aw/compat.json file, which controls which gh-aw compiler versions may run. The agent fetches the advisory with gh api, trying the repository endpoint first and then the global advisory endpoint, confirms the fixed version from a release or registry, chooses between a minimum version, an exact blocked list or a recommended version, and writes remediation steps in compat.md. It must not invent advisory details, lower existing minimums or skip the repository's validation task.

Funktionen

Details