What is a VuXML entry in FreeBSD?

A VuXML entry is an XML document used in the FreeBSD Ports tree to record and track security vulnerabilities (CVEs) affecting specific software versions.

Why does the VuXML commit need to happen before the port update?

FreeBSD's standardized workflow requires documentation of the vulnerability to exist in the tree before the fix is committed to ensure proper tracking and reporting.

Does it support quarterly branches?

Yes, the skill includes logic for adding MFC (Merge From Current) trailers specifically for current quarterly branches to assist with backporting fixes.

How does this skill handle UUID generation?

The skill utilizes the 'uuidgen' tool to create unique Vulnerability Identifiers (VID) required for each new security entry in the VuXML database.

Does this skill help with commit formatting?

Yes, it ensures that security updates include the mandatory 'Security:' and 'MFC:' trailers in the git commit message, linking back to the VuXML entry.

FreeBSD Port Security Manager

Name: FreeBSD Port Security Manager
Author: lwhsu

bylwhsu

0•

安全与测试

Automates the creation of VuXML entries and security-related port updates for the FreeBSD Ports Collection.

This skill streamlines the process of responding to security vulnerabilities within the FreeBSD Ports Collection. It guides Claude through the standardized workflow of generating unique VuXML identifiers, documenting CVEs and affected version ranges, and ensuring correct commit ordering with required security trailers. By following official FreeBSD security procedures, it helps maintain the integrity of the ports tree while reducing manual overhead for developers managing security advisories and CVEs.

主要功能

01Automated VuXML entry generation with unique UUIDs

02Enforcement of correct commit ordering for security updates

03Automatic insertion of Security VID and MFC trailers

04Integrated branch management for security-related patches

05Standardized workflow for CVE and security advisory documentation

060 GitHub stars

使用场景

01Updating a port to a patched version following a security advisory

02Documenting a new CVE for an existing FreeBSD port

03Generating standardized VuXML entries for the FreeBSD vulnerability database

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lwhsu/freebsd-claude-skills port-security

For use in Claude.ai and ChatGPT

主要功能

01Automated VuXML entry generation with unique UUIDs

02Enforcement of correct commit ordering for security updates

03Automatic insertion of Security VID and MFC trailers

04Integrated branch management for security-related patches

05Standardized workflow for CVE and security advisory documentation

060 GitHub stars

使用场景

01Updating a port to a patched version following a security advisory

02Documenting a new CVE for an existing FreeBSD port

03Generating standardized VuXML entries for the FreeBSD vulnerability database

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lwhsu/freebsd-claude-skills port-security

For use in Claude.ai and ChatGPT