使用VulnVibes进行分阶段威胁建模和调查来分类整理拉取请求安全风险
Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of doing an ad hoc manual review.
Prerequisites
GitHub token, Anthropic API key, access to the target GitHub pull request
Installation
Use the upstream install or setup path that matches your environment:
- pip install -e .
- git clone https://github.com/1991513ccie-png/skills
- pip install -e ".[dev]"
Requirements and caveats from upstream:
- 💻 CLI + Python API: Use from command line or programmatically
- ## Python API
- python
Basic usage or getting-started notes:
- bash
- ### 1. Set Up Credentials
- export GITHUB_TOKEN="ghp_your_token_here"
- Source: https://github.com/1991513ccie-png/skills
- Extracted from upstream docs: https://raw.githubusercontent.com/anshumanbh/vulnvibes/HEAD/README.md
Documentation
- https://github.com/1991513ccie-png/skills
