# Triage pull request security risks with staged threat modeling and investigation using VulnVibes

> Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of doing an ad hoc manual review.

- Skill: `agentskillexchange/triage-pull-request-security-risks-with-staged-threat-modeli` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/triage-pull-request-security-risks-with-staged-threat-modeli`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/triage-pull-request-security-risks-with-staged-threat-modeli/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/triage-pull-request-security-risks-with-staged-threat-modeli

---


# Triage pull request security risks with staged threat modeling and investigation using VulnVibes

Analyze a GitHub pull request for security impact, run targeted vulnerability-investigation skills when Stage 1 finds credible threats, and return a structured verdict instead of doing an ad hoc manual review.

## Prerequisites

GitHub token, Anthropic API key, access to the target GitHub pull request

## Installation

Use the upstream install or setup path that matches your environment:
- pip install -e .
- git clone https://github.com/anshumanbh/vulnvibes.git
- pip install -e ".[dev]"

Requirements and caveats from upstream:
- 💻 **CLI + Python API**: Use from command line or programmatically
- ## Python API
- python

Basic usage or getting-started notes:
- bash
- ### 1. Set Up Credentials
- export GITHUB_TOKEN="ghp_your_token_here"

- Source: https://github.com/anshumanbh/vulnvibes
- Extracted from upstream docs: https://raw.githubusercontent.com/anshumanbh/vulnvibes/HEAD/README.md

## Documentation

- https://github.com/anshumanbh/vulnvibes

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/triage-pull-request-security-risks-with-staged-threat-modeling-and-investigation-using-vulnvibes/)