Release
Zeecka/AperiSolve
Cut a new AperiSolve release — bump the version, commit "chore(release): X.Y.Z", tag it, push, and publish a GitHub Release whose notes are computed from the commits since the last tag.
Turn a vulnerability report into a publication-ready GitHub Security Advisory.
Install Draft Security Advisory
$ npx skills add frappe/skills --skill draft-security-advisory -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install frappe/skills draft-security-advisory --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/frappe/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/draft-security-advisory .claude/skills/draft-security-advisory && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "draft-security-advisory" agent skill from https://github.com/frappe/skills/tree/main/skills/draft-security-advisory into .claude/skills/draft-security-advisory/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "draft-security-advisory", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/frappe/skills/tree/main/skills/draft-security-advisoryType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add frappe/skills --skill draft-security-advisory -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install frappe/skills draft-security-advisory --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/frappe/skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/draft-security-advisory .agents/skills/draft-security-advisory && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "draft-security-advisory" agent skill from https://github.com/frappe/skills/tree/main/skills/draft-security-advisory into .agents/skills/draft-security-advisory/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "draft-security-advisory", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add frappe/skills --skill draft-security-advisory -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install frappe/skills draft-security-advisory --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/frappe/skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/draft-security-advisory .cursor/skills/draft-security-advisory && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "draft-security-advisory" agent skill from https://github.com/frappe/skills/tree/main/skills/draft-security-advisory into .cursor/skills/draft-security-advisory/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "draft-security-advisory", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/frappe/skills.git --path skills/draft-security-advisory--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add frappe/skills --skill draft-security-advisory -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install frappe/skills draft-security-advisory --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/frappe/skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/draft-security-advisory .gemini/skills/draft-security-advisory && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "draft-security-advisory" agent skill from https://github.com/frappe/skills/tree/main/skills/draft-security-advisory into .gemini/skills/draft-security-advisory/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "draft-security-advisory", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install frappe/skills draft-security-advisoryInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add frappe/skills --skill draft-security-advisory -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/frappe/skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/draft-security-advisory .github/skills/draft-security-advisory && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "draft-security-advisory" agent skill from https://github.com/frappe/skills/tree/main/skills/draft-security-advisory into .github/skills/draft-security-advisory/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "draft-security-advisory", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add frappe/skills --skill draft-security-advisory -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install frappe/skills draft-security-advisory --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/frappe/skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/draft-security-advisory .opencode/skills/draft-security-advisory && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "draft-security-advisory" agent skill from https://github.com/frappe/skills/tree/main/skills/draft-security-advisory into .opencode/skills/draft-security-advisory/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "draft-security-advisory", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
draft-security-advisory- GitHub stars
- 146
- Token cost
- ~1.3k tokens
- SKILL.md length
- 684 words
- Files
- 1
- Skills in repo
- 8
- Repo updated
- First seen
- Licence
- None found
At a glance
Turn a vulnerability report into a publication-ready GitHub Security Advisory.
- Security work in your project
- SKILL.md covers Class, not instance, Title, Advisory body and Form fields, plus 2 more sections
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Draft Security Advisory is an agent skill from frappe/skills. Turn a vulnerability report into a publication-ready GitHub Security Advisory.
Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Security. It works with GitHub. The repository describes itself as: Agent skills for Frappe App development.
When your agent uses it
- Security work in your project
Example prompts
- “/draft-security-advisory”
What it can do on your machine
Read from SKILL.md and the folder at commit 0bef982. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Draft Security Advisory loads about 1.3k tokens when it runs. Until then it costs about 26 tokens; SKILL.md has 684 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
Without a licence we can't republish the file, so here is its outline and opening line. It has 684 words (~1,293 tokens).
“Turn the vulnerability report the user provides into a publication-ready GitHub Security Advisory (GHSA): a terse two-section body, with the precision carried by GitHub's structured form fields.”
- name
- draft-security-advisory
- disable-model-invocation
- true
Files
Just SKILL.md in skills/draft-security-advisory of frappe/skills.
Open the folder on GitHubat commit 0bef982
Compare with similar skills
Draft Security Advisory next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Draft Security Advisory this skillfrappe/skills | 146 | — | ~1.3k | Automated safety check: Pass | None | |
| ReleaseZeecka/AperiSolve | 850 | — | ~1.9k | Automated safety check: Pass | MIT | |
| Triage Codeqlnetdata/netdata | 81k | — | ~1.8k | Automated safety check: Notes | GPL-3.0 | |
| Security AdvisoryMidnightBSD/src | 114 | — | ~2.2k | Automated safety check: Pass | Custom licence | |
| Security Vulnerability Analysiseclipse-ankaios/ankaios | 125 | — | ~1.5k | Automated safety check: Pass | Apache-2.0 | |
| Agentic GitHub Actions Auditortrailofbits/skills | 7.4k | 6 repos | ~5.4k | Automated safety check: Notes | CC-BY-SA-4.0 |
Similar skills
Triage Codeql
netdata/netdata
Inspect, review or triage GitHub Code Scanning alerts, including CodeQL findings; apply verified dismissals when authorized.
Security Advisory
MidnightBSD/src
Handle a security fix end to end for MidnightBSD src - triage a FreeBSD security advisory (FreeBSD-SA-) or CVE against this tree, port the fix to master and both stable branches, add the UPDATING…
Security Vulnerability Analysis
eclipse-ankaios/ankaios
Analyze potential Ankaios security vulnerabilities from pasted reports, local evidence, or advisory URLs.
- Official
Agentic GitHub Actions Auditor
trailofbits/skills
Statically audits GitHub Actions workflows that run AI coding agents, tracing attacker-controlled input to agent prompts and flagging unsafe sandbox, trigger and allowlist settings.
Report Clawhub Malicious Skill
openclaw/clawscan
A skill your agent uses when a researcher, maintainer, or contributor found or suspects a malicious skill on ClawHub and needs a private reporting workflow: opening a GitHub private vulnerability…
More from frappe/skills
All 8 skills in this repoFrappe App Dev
frappe/skills
Builds full-stack Frappe Framework applications end-to-end. An agent skill from frappe/skills.
Deep App Audit
frappe/skills
Deep audit of a Frappe app for security, correctness, and customization defects.
Fix Issue
frappe/skills
Fix a bug reported in a GitHub issue or a markdown file, without letting the report's noise and guesses into the main context.
Frappe Code Review
frappe/skills
Review code for any Frappe application — a checklist distilled from years of engineering practice on correctness, security, performance, concurrency, readability, API design, and testing.
Resolve Backport Conflicts
frappe/skills
Resolve merge conflicts in a Mergify backport pull request. An agent skill from frappe/skills.
Technical Writing
frappe/skills
Write prose in "Simplified Technical English". An agent skill from frappe/skills.
Related
Works with
Categories
Questions about Draft Security Advisory
What does Draft Security Advisory do?
Turn a vulnerability report into a publication-ready GitHub Security Advisory. Draft Security Advisory is an agent skill from frappe/skills. Turn a vulnerability report into a publication-ready GitHub Security Advisory.
When should I use Draft Security Advisory?
Draft Security Advisory fits situations like: security work in your project.
How do I install Draft Security Advisory in Claude Code?
Run `npx skills add frappe/skills --skill draft-security-advisory -a claude-code`. Or copy the skill folder (skills/draft-security-advisory in frappe/skills) into .claude/skills/draft-security-advisory in your project. Claude Code loads it when a task matches its description.
How do I install Draft Security Advisory in Codex?
Run `npx skills add frappe/skills --skill draft-security-advisory -a codex`. Or copy the skill folder (skills/draft-security-advisory in frappe/skills) into .agents/skills/draft-security-advisory in your project. Codex loads it when a task matches its description.
Can I use Draft Security Advisory in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add frappe/skills --skill draft-security-advisory -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/draft-security-advisory, .gemini/skills/draft-security-advisory, .github/skills/draft-security-advisory and .opencode/skills/draft-security-advisory in your project.
What does Draft Security Advisory need to run?
SKILL.md names no scripts, command-line tools or credentials: Draft Security Advisory is instructions for the agent only.
Does Draft Security Advisory access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Draft Security Advisory safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Draft Security Advisory use?
No licence was found for Draft Security Advisory or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.
How many tokens does Draft Security Advisory use?
About 1.3k tokens (SKILL.md is roughly 5.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Draft Security Advisory?
Skills that share tags, products or a category with Draft Security Advisory: Release (Zeecka/AperiSolve, 850 stars), Triage Codeql (netdata/netdata, 81k stars), Security Advisory (MidnightBSD/src, 114 stars) and Security Vulnerability Analysis (eclipse-ankaios/ankaios, 125 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Draft Security Advisory?
frappe (a GitHub organization) maintains it in frappe/skills, which has 146 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on September 30, 2026.
Source: frappe/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.