security-triage
Skill7.2k starsChanged 7 months agoLicence not identifiedView on GitHub
Use when a security report arrives or needs a reply - a new Bugbop report (VDP or private bug bounty), a GitHub security advisory submission in the "triage" state on fleetdm/fleet, a disclosure in the security inbox, a reporter asking "any update?", or a fix merging for a tracked report. Also use for the daily security report triage ritual.
24 other projects use a version of this.
Adopted by
Steady: 0 new projects took it in the last 4 weeks, none the 4 weeks before.thin data
Most recently taken up by
- glowingkitty/OpenMatestheir own version, first seen Nov 9, 2026
- kontourai/stationtheir own version, first seen Nov 3, 2026
- rack/racktheir own version, first seen Nov 2, 2026
- QVerisAI/QVerisBottheir own version, first seen Nov 1, 2026
- warrisk-no/claude-skillstheir own version, first seen Oct 20, 2026
- OpenClawAndroid/openclaw-android-assistanttheir own version, first seen Oct 17, 2026
Who's talking about fleetdm/fleet
- golang/go“proposal: x/tools/go/analysis/passes/appends: check for incorrect slice length initialization ”GitHub · Oct 14, 2024 · 18 reactions
- NixOS/nixpkgs“fleet-{desktop,orbit}: init at 1.55.0”GitHub · May 29, 2026 · 6 reactions
- A Hacker News story“Open Source Employee Monitoring”Hacker News · Oct 8, 2021 · 4 points
- SpecterShell/Dumplings“Granola.Granola: Resolve installer to a stable URL”GitHub · May 14, 2026 · 2 reactions
- osquery/osquery“Added UpgradeCode to programs table”GitHub · Apr 3, 2025 · 2 reactions
The biggest 5 of 55 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 55
Talked about on GitHub, Hacker News, Bluesky and Stack Overflow (55 times).
On GitHub · 50
- Oct 14, 2024proposal: x/tools/go/analysis/passes/appends: check for incorrect slice length initialization — golang/go18 reactions · 28 comments
- May 29, 2026fleet-{desktop,orbit}: init at 1.55.0 — NixOS/nixpkgs6 reactions · 19 comments
- May 14, 2026Granola.Granola: Resolve installer to a stable URL — SpecterShell/Dumplings2 reactions
- Apr 3, 2025Added UpgradeCode to programs table — osquery/osquery2 reactions · 1 comment
- Jul 29, 2024Last matching pattern is not taking precedence, resulting in wrong codeowners — fan-tom/intellij-codeowners2 reactions · 1 comment
45 more on GitHub
- Oct 7, 2026chore(deps): update helm release fleet to v7.0.22 — devantler-tech/platform1 reaction · 6 comments
- Oct 7, 2026fleet-{orbit,desktop}: add lucasmrod and nulmete as maintainers — NixOS/nixpkgs1 reaction · 2 comments
- Apr 23, 2026Add `secureboot_certificates` table for Linux — osquery/osquery1 reaction · 5 comments
- Dec 2, 2025Feat: Add attestations to published images — coollabsio/minio1 reaction
- Apr 10, 2025If there is an error in Run()/RegisterSystray(), errors are dropped and OnReady/OnExit() are never called — fyne-io/systray1 reaction · 4 comments
- Dec 19, 2024Added python packages in user directories — osquery/osquery1 reaction · 8 comments
- Aug 15, 2024`GoogleChromeProfilesGenerate` returns no rows for Linux — macadmins/osquery-extension1 reaction
- Aug 6, 2021generateSarif | INPUT_GENERATESARIF causes crash — semgrep/semgrep-action1 reaction · 2 comments
- Nov 14, 2026agent-skills.github.fleetdm.fleet: init at 4.94.1 — sudosubin/agents.nix0 reactions
- Nov 13, 2026[Bug] MediaRemoteUIService appears as an unnamed app on macOS 27 — ronitsingh10/FineTune0 reactions
- Nov 7, 2026Upgrade Fleet to 4.94.1 — chrsdrhm/fleet-homelab-infra0 reactions · 1 comment
- Nov 6, 2026Bootstrap Token is lost when a Mac renews its identity certificate — micromdm/nanomdm0 reactions · 4 comments
- Nov 2, 2026upstream: fleetctl v4.94.0 → v4.94.1 — phischl/paddock-mdm0 reactions
- Nov 2, 2026upstream: fleet v4.94.0 → v4.94.1 — phischl/paddock-mdm0 reactions
- Nov 2, 2026Run fleetd 1.63.0, the first with NixOS support — maxstreese/maxnix0 reactions
- Nov 1, 2026Upgrade Fleet to 4.94.0 — chrsdrhm/fleet-homelab-infra0 reactions · 4 comments
- Oct 31, 2026Unblocked: Run fleetd 1.63.0, the first release with NixOS support — maxstreese/maxnix0 reactions
- Oct 29, 2026Bump Fleet to v4.94.0 — kitzy/homelab-gitops0 reactions
- Oct 26, 2026upstream: fleet v4.93.1 → v4.93.2 — phischl/paddock-mdm0 reactions
- Oct 26, 2026upstream: fleetctl v4.93.1 → v4.93.2 — phischl/paddock-mdm0 reactions
- Oct 23, 2026Refresh for 2026: archived/renamed projects, outdated Security Onion description, suggested additions — aboutsecurity/blueteam_homelabs0 reactions
- Oct 23, 2026fix(emudhra): use OpenSSL's self-signed rule for Windows chain anchors — karmine05/dirtyfrag-blog0 reactions
- Oct 23, 2026fix(emudhra): require a self-signed bundle root as the Windows chain anchor — karmine05/dirtyfrag-blog0 reactions
- Oct 22, 2026fix(emudhra): anchor Windows chain check on CA keys; sync scripts with Fleet repo — karmine05/dirtyfrag-blog0 reactions
- Oct 22, 2026flint check flags continuous_automations_enabled as unknown key on policies — headmin/fleet-editor-extensions0 reactions
- Oct 20, 2026[Change] Update fleet.marfi.app Fleet to v4.93.1 (Atera #50190) — MARFI-Systems/fleet0 reactions
- Oct 19, 2026startup_items: read per-user BTM archives on macOS 27 — osquery/osquery0 reactions · 1 comment
- Oct 19, 2026docs: treat Fleet as one MDM among others — RawTrail/RawTrail0 reactions · 11 comments
- Oct 19, 2026upstream: fleet v4.93.0 → v4.93.1 — phischl/paddock-mdm0 reactions
- Oct 19, 2026upstream: fleetctl v4.93.0 → v4.93.1 — phischl/paddock-mdm0 reactions · 1 comment
- Oct 16, 2026Cut new tag release for external-vuln-scans addon — fleetdm/fleet-terraform0 reactions · 8 comments
- Oct 7, 2026fix(vulnerabilities): CU-86akb2h75 ignore VLC for Android CVEs on desktop VLC — flamingo-stack/fleetmdm0 reactions · 1 comment
- Oct 7, 2026fix(vulnerabilities): CU-17tkuw5vq2y treat trailing zero version parts as equal in SmartVerCmp — flamingo-stack/fleetmdm0 reactions · 1 comment
- Oct 7, 2026Support alternative Intune clouds for Windows Autopilot sync — jorgeasaurus/fleet0 reactions
- Oct 3, 2026Add per-location VLANs and Fleet-managed certificate enrollment — CampusTech/cloud-8021x0 reactions · 7 comments
- Sep 29, 2026fleet: 4.90.1 -> 4.92.1 — NixOS/nixpkgs0 reactions · 1 comment
- Sep 17, 2026Publish the Go vulnerability database as a release asset — fleetdm/vulnerabilities0 reactions · 1 comment
- Sep 2, 2026x/vulndb: TestLintReports/GO-2026-4335 failures — golang/go0 reactions · 3 comments
- Aug 30, 2026fleet: 4.82.2 -> 4.90.1 — NixOS/nixpkgs0 reactions · 1 comment
- Aug 20, 2026x/vulndb: potential Go vuln in github.com/fleetdm/fleet/v4: GHSA-rxhg-vcww-2mpw — golang/vulndb0 reactions · 1 comment
- Aug 20, 2026x/vulndb: potential Go vuln in github.com/fleetdm/fleet/v4: GHSA-q9c5-pp7m-fm2g — golang/vulndb0 reactions · 1 comment
- Aug 20, 2026x/vulndb: potential Go vuln in github.com/fleetdm/fleet: GHSA-7q96-f8xw-jv5j — golang/vulndb0 reactions · 1 comment
- Aug 12, 2026x/vulndb: potential Go vuln in github.com/fleetdm/fleet/v4: GHSA-88p2-jj8w-j8qg — golang/vulndb0 reactions · 1 comment
- Aug 11, 2026Add S3 streaming checksum portability conformance skill — mouadja02/skills0 reactions
- Aug 3, 2026Discover Safari extensions under Application Support for safari_extensions — osquery/osquery0 reactions · 5 comments
On Hacker News · 2
- Oct 8, 2021Open Source Employee Monitoring4 points
- Dec 25, 2021Happy Holidays GitHub PR2 points
On Bluesky · 2
- Aug 2, 2026fleet by @fleetctl (⭐️ 6657) Open device management #go — @golangoss.bsky.social1 likes and repost
- Apr 4, 2025fleet by @fleetctl (⭐️ 3989) Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data… — @golangoss.bsky.social1 likes and repost
On Stack Overflow · 1
- Mar 11, 2025How can i create a root key and X.509 Certificate0 votes
Used with
Projects with it also use openclaw-qa-testing and openclaw-secret-scanning-maintainer.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
AtomicBot-aiSkillopenclaw-qa-testing
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
Also in 4 projects that use this
QVerisAISkillopenclaw-secret-scanning-maintainer
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
Also in 3 projects that use this
Other versions24 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 24
- moltbot/clawdbot★ 394ksame name
- steipete/warelay★ 394ksame name
- steipete/clawdis★ 394ksame name
- moltbot/moltbot★ 394ksame name
- clawdbot/clawdbot★ 394ksame name
- openclaw/openclaw★ 394ksame name
- molt-bot/clawdbot★ 391ksame name
- symfony/symfony★ 32ksame name
- rack/rack★ 5.1ksame name
- OpenBMB/EdgeClaw★ 1.2ksame name
14 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository34 other files it gives its agents.
- AGENTS.mdAGENTS.md
- .claude/CLAUDE.mdCLAUDE.md
- aikido-ticketsSkill
- ai-profile-testSkill
- api-design-checkSkill
- bump-migrationSkill
- cherry-pickSkill
- command-paletteSkill
- content-styleSkill
- find-related-testsSkill
- fix-ciSkill
- fix-sql-parserSkill
- fleet-article-formattingSkill
- fleet-case-study-formattingSkill
- fleet-gitopsSkill
- fleet-guide-formattingSkill
- handbook-prSkill
- lintSkill
- new-endpointSkill
- new-fmaSkill
- new-migrationSkill
- openspec-apply-changeSkill
- openspec-archive-changeSkill
- openspec-exploreSkill
- openspec-proposeSkill
- projectSkill
- push-reference-docsSkill
- release-retroSkill
- review-prSkill
- spec-storySkill
- testSkill
- tier-modesSkill
- vuln-triageSkill
- who-blocks-this-prSkill
The file
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.