Triage Pull Request Security Risks With Staged Threat Modeling And Investigation Using Vulnvibes
ASecurity
Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of doing an ad hoc manual review.
36 stars
0 votes
0 copies
2 views
Added June 8, 2026
ai-agentspythongobashgitapisecuritydocumentation
Works with
cli
api
Security analysis
A92/100
mediumInstalls packages at runtime which could introduce malicious dependencies
Installs into .claude/skills of the current project.
Are you the author of Triage Pull Request Security Risks With Staged Threat Modeling And Investigation Using Vulnvibes?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-triage-pull-request-security-risks-with-staged-thr)
---
name: "Triage pull request security risks with staged threat modeling and investigation using VulnVibes"
slug: "triage-pull-request-security-risks-with-staged-threat-modeling-and-investigation-using-vulnvibes"
description: "Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of doing an ad hoc manual review."
github_stars: 17
verification: "security_reviewed"
source: "https://github.com/anshumanbh/vulnvibes"
author: "anshumanbh"
publisher_type: "individual"
category: "Security & Verification"
framework: "Claude Agents"
tool_ecosystem:
github_repo: "anshumanbh/vulnvibes"
github_stars: 17
---
# Triage pull request security risks with staged threat modeling and investigation using VulnVibes
Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of doing an ad hoc manual review.
## Prerequisites
GitHub token, Anthropic API key, access to the target GitHub pull request
## Installation
Use the upstream install or setup path that matches your environment:
- pip install -e .
- git clone https://github.com/anshumanbh/vulnvibes.git
- pip install -e ".[dev]"
Requirements and caveats from upstream:
- 💻 **CLI + Python API**: Use from command line or programmatically
- ## Python API
- python
Basic usage or getting-started notes:
- bash
- ### 1. Set Up Credentials
- export GITHUB_TOKEN="ghp_your_token_here"
- Source: https://github.com/anshumanbh/vulnvibes
- Extracted from upstream docs: https://raw.githubusercontent.com/anshumanbh/vulnvibes/HEAD/README.md
## Documentation
- https://github.com/anshumanbh/vulnvibes
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/triage-pull-request-security-risks-with-staged-threat-modeling-and-investigation-using-vulnvibes/)