Openclaw Ghsa Maintainer
A focused workflow tool for managing GitHub Security Advisories in the OpenClaw repository. It walks you through fetching advisory state, verifying private fork PRs are closed before publish, and building PATCH payloads with proper Markdown handling using heredocs and jq instead of fragile escaped strings. The guardrails are helpful: separate PATCH calls when you need to set both severity and CVSS, always check for literal escaped newlines after publish, and keep commit hashes and PR numbers out of public advisory text. This is explicitly scoped to GHSA work only, so you won't accidentally mix security patch workflows with regular release tasks.
- skills.sh installs
- 184
- GitHub stars
- 376.2K
- last updated
- Jun 3, 2026
Install
$ npx -y skills add steipete/clawdis --skill openclaw-ghsa-maintainer --agent claude-codeInstalls into .claude/skills of the current project.
Files
OpenClaw GHSA Maintainer
Use this skill for repo security advisory workflow only. Keep general release work in release-openclaw-maintainer.
Respect advisory guardrails
- Before reviewing or publishing a repo advisory, read
SECURITY.md. - Ask permission before any publish action.
- Treat this skill as GHSA-only. Do not use it for stable or beta release work.
Fetch and inspect advisory state
Fetch the current advisory and the latest published npm version:
gh api /repos/openclaw/openclaw/security-advisories/<GHSA>
npm view openclaw version --userconfig "$(mktemp)"
Use the fetch output to confirm the advisory state, linked private fork, and vulnerability payload shape before patching.
Verify private fork PRs are closed
Before publishing, verify that the advisory's private fork has no open PRs:
fork=$(gh api /repos/openclaw/openclaw/security-advisories/<GHSA> | jq -r .private_fork.full_name)
gh pr list -R "$fork" --state open
The PR list must be empty before publish.
Prepare advisory Markdown and JSON safely
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/steipete/clawdis
- First seen
- Jun 3, 2026
More from steipete/clawdis
All 61- Openclaw Parallels Smoke184
- Openclaw Test Heap Leaks182
- Openclaw Release Maintainer174
- Security Triage172
- Taskflow151
- Openclaw Qa Testing126
- Summarize21K
- Weather5.9K
- Tmux5.3K
- Gog4.6K
- Nano Pdf4.2K
- Openai Whisper4.1K
- Ordercli3.7K
- Mcporter3.5K
- Peekaboo3.4K
- Apple Reminders3.2K
- Clawhub3.2K
- Coding Agent3.2K
- Himalaya3.2K
- Obsidian3.2K
- 1password3.1K
- Apple Notes3.1K
- Video Frames3.1K
- Healthcheck2.9K
Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs