Total Skills
2
Skills published by apache with real stars/downloads and source-aware metadata.
Total Skills
2
Total Stars
16
Total Downloads
0
Comparison chart based on real stars and downloads signals from source data.
security-cve-allocate
8
pr-management-triage
8
Walk a security team member through allocating a CVE for an <tracker> tracking issue. Prints the ASF Vulnogram allocation URL and a CVE-ready title (the issue title stripped of redundant `<vendor>: <product>:` (e.g. `Apache Airflow:`), `[ Security Report ]`, trailing version parens and similar noise), waits for the allocated CVE ID (allocation is PMC-gated — non-PMC triagers relay to a PMC member), and then updates the tracker in place: fills in the *CVE tool link* field, adds the `cve allocated` label, posts a collapsed status-change comment, and runs `generate-cve-json --attach` to embed the paste-ready JSON in the body. Finishes by handing off to the `security-issue-sync` skill to reconcile the rest of the tracker (milestone, assignee, reporter drafts, fix-PR state) now that the CVE landing is complete.
Sweep open pull requests on the configured `<upstream>` repo (default: read from `<project-config>/project.md → upstream_repo`), classify each one against the project's quality criteria, propose a disposition, and — on the maintainer's confirmation — carry out the action via `gh`. Decides whether each PR should be converted to draft with a quality-issues comment, commented on, closed, rebased, have CI reruns triggered, have a first-time-contributor workflow approved, be pinged to a stale reviewer, or marked `ready for maintainer review`. Does **not** perform code review (no LLM line comments, no approve/request-changes submissions) — that lives in [`pr-management-code-review`](../pr-management-code-review/SKILL.md).