SKILL

security-alert

Dependabot の security alert（GHSA / CVE 起因の脆弱性アラート）をトリアージして解決するワークフロー。未解決の alert を一括取得し、direct / transitive を判別して修正方針（PR マージ / 直接 bump / package manager の override）を決め、トラッキング Issue を作成して修正 PR を出し、判断根拠を ADR に記録する。transitive 依存で Dependabot が PR を起票しないケースを主対象にする。 Trigger when the user says: "security alert", "セキュリティアラート", "Dependabot alert", "脆弱性対応", "GHSA", "CVE 対応", "security alert 対応", "handle security alerts", "triage security alerts", "dependabot security", "依存の脆弱性", or similar phrases requesting to process Dependabot security alerts.

Original · translation did not pass checks

Target: Cloud, operations & security. Automatically collected · unverified.

Use with Cursor

A guide for this combination is not available yet, and compatibility has not been verified.

Requirements

Only the author’s Skill metadata is included. Read the full instructions to check dependencies, licensing and conditions of use.

Choose an AI tool with documented instructions, or save the resource and request a guide after the page loads.

Read the author’s documentation ↗