Skip to content
Kitbay
Submit
SkillOfficial

security-advisory-compat-enforcer

MITUpdated on Nov 11, 20265,616GitHub stars

A maintainer skill for the gh-aw repository that turns a GitHub security advisory into a minimal edit of the repository's .github/aw/compat.json file, which controls which gh-aw compiler versions may run.

InstallRepository Checked on Nov 13, 2026

What the skill teaches

A maintainer skill for the gh-aw repository that turns a GitHub security advisory into a minimal edit of the repository's .github/aw/compat.json file, which controls which gh-aw compiler versions may run. The agent fetches the advisory with gh api, trying the repository endpoint first and then the global advisory endpoint, confirms the fixed version from a release or registry, chooses between a minimum version, an exact blocked list or a recommended version, and writes remediation steps in compat.md. It must not invent advisory details, lower existing minimums or skip the repository's validation task.

Capabilities

  • Retrieve a GHSA advisory through gh api
  • Verify the patched release version
  • Update minimum or blocked versions in compat.json
  • Write remediation guidance in compat.md

Other MCP servers and skills for GitHub