fix-vulnerabilities
Fix Multi-Repo Vulnerabilities
Resolve dependency vulnerabilities across multiple repositories from a batch of vulnerability entries.
Input
The user provides one or more vulnerability entries, typically in Vanta format:
[Vanta] [github] [<repo-name>] npm-<package> <vulnerable-range>/<CVE-ID>
Examples:
[Vanta] [github] [soyio-rn-sdk] npm-minimatch < 3.1.3/CVE-2026-26996
[Vanta] [github] [soyio-docs] npm-minimatch >= 9.0.0, < 9.0.6/CVE-2026-26996
[Vanta] [github] [privacy-center] npm-minimatch >= 9.0.0, < 9.0.6/CVE-2026-26996
More from soyio-id/skills
commit-work
Review, organize, and commit pending changes. Split into logical commits, stage carefully, and write clear Conventional Commit messages. Use when the user asks to commit, stage changes, or organize work into commits.
10create-pr
Create a clear, review-ready pull request with gh CLI. Gather context from commits and diff, follow repository templates, push safely, and return the PR URL with merge guidance.
10using-git-worktrees
Use when starting feature work that needs isolation from current workspace or before executing implementation plans - creates isolated git worktrees with smart directory selection and safety verification
9create-worktree
Create an isolated worktree for a new branch, existing branch, or PR review. Prefer repo-local worktree commands when they exist, and fall back to vanilla git worktrees otherwise.
8prepare-security-prs
Triage and prepare automated dependency security PRs for merge with minimal risk. Identify bot PRs that need intervention, resolve required issues only, refresh stale branches safely, detect superseded PRs, and keep diffs dependency-focused.
8create-production-pr
Create a production promotion PR from main/master to production in an allowed repo or the current repo. Use the repo PR template when available, list included PRs, and generate a date-based title with production-only version suffixes.
6