fix-security-vulnerability
Installation
SKILL.md
Fix Security Vulnerability Skill
Analyze Dependabot security alerts and propose fixes for the sentry-changelog Next.js app. Does NOT auto-commit - always presents analysis first and waits for user approval.
Input
- Dependabot URL:
https://github.com/getsentry/sentry-changelog/security/dependabot/12 - Or just the alert number:
12
Workflow
Step 1: Fetch Vulnerability Details
gh api repos/getsentry/sentry-changelog/dependabot/alerts/<alert-number>
Extract: package name, vulnerable/patched versions, CVE ID, severity, description.