mappedsky/github-security-investigations
Reusable Agent Plugin workflows for GitHub organization security posture and repository CVE reachability.
Guide an agent through a GitHub organization security investigation using the github_security toolset and produce a prioritized executive summary.
Find the CVEs recorded against one GitHub repository, then read that repository's manifests and source through the external GitHub MCP tools to judge whether each vulnerability is actually reachable in this codebase.
Resolve a GitHub repository in the security graph and list the CVEs recorded against it, confirming from the graph's dependency data which vulnerable versions are actually installed. Produces the finding set that a reachability review then judges against the source.
Judge whether already-identified CVEs are reachable in a repository's own code, by reading its source through the external GitHub MCP tools. Takes the finding list produced by the repository CVE findings review.