Apache Magpie is a framework of agent-assisted workflows for maintaining Apache software projects, including issue triage, pull-request review, contributor mentoring, and security-report handling. Apache maintainers and developers use it to delegate repetitive project work to coding agents while retaining human review. Its catalogue entries are the skills, instructions, plugin, and settings that implement these workflows.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add apache/magpie --skill security-issue-invalidategit clone --depth 1 https://github.com/apache/magpieWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/apache/magpie/security-issue-invalidate)<a href="https://agentmods.dev/skills/apache/magpie/security-issue-invalidate"><img src="https://agentmods.dev/badge/skills/apache/magpie/security-issue-invalidate.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.11782 |
| Opus 5 | $0.00063 | $0.05891 |
| Sonnet 5 | $0.00025 | $0.02356 |
| Haiku 4.5 | $0.00013 | $0.01178 |
Grade A, and why
magpie-security-issue-invalidate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 982 lines — stays where its author put it; the contents beside it link to each section on GitHub.
security-issue-invalidate
This skill is the terminal-disposition apply step for the
invalid close on an <tracker> tracker. It does not host the
discussion that decides invalidity — that happens at Step 5 of the
handling process
in the tracker's comments. Once the team has reached a
consensus-invalid decision, this skill applies it: labels the
tracker invalid, posts a short public-facing closing comment,
closes the tracker, archives the project-board item, and (for
security@-imported trackers) drafts a reply to the reporter
explaining why.
It is the symmetric counterpart of
security-cve-allocate (apply step for the
valid → CVE path). Both skills assume the validity decision has
already been reached; they wire that decision into the tracker
state in one pass.
Golden rule — never sends email. Any reply to the reporter is
created as a Gmail draft on the original inbound thread. The
triager reviews the draft in Gmail before sending. The skill must
not call send on any drafting backend.
Golden rule — public-facing comment is brief. The closing comment posted on the public-by-collaborator-access tracker is short and process-shaped ("closing as invalid per team consensus in this thread"); the team's full reasoning lives in the discussion comments and the rollup. The detailed reasoning belongs in the email draft to the reporter (where it actually serves a purpose), not in a closing comment that re-packages the same material.
Golden rule — no outreach to PR-imported tracker authors. When
the tracker came in via
security-issue-import-from-pr
(detected by the N/A — opened from public PR … sentinel in the
Security mailing list thread body field), there is no reporter
to notify — the PR author is not the CVE reporter and the public
PR stays unaware of the CVE process per that skill's policy. Skip
the email-draft step entirely; do not comment on the public PR;
do not reach out to the PR author through any channel.
Golden rule — every <tracker> / <upstream> reference is
clickable in the surface it lands on. Whenever this skill emits
a reference to the tracker issue, a sibling tracker, or any
cited PR — the closing comment posted on the tracker, the
draft email reply to the reporter on the <security-list>
thread, the recap output — the reference must be one click away
in whatever surface it lands on:
-
On markdown surfaces (the closing comment posted to
<tracker>, the draft email reply text destined for the<security-list>Gmail thread): use the markdown link form perAGENTS.md§ Linking tracker issues and PRs:<tracker>issue:[<tracker>#NNN](https://github.com/<tracker>/issues/NNN)<upstream>PR (rarely needed; e.g. citing a public PR the report duplicates):[<upstream>#NNN](https://github.com/<upstream>/pull/NNN)- Comment: link to the
#issuecomment-<C>anchor.
-
On terminal surfaces (the proposal shown before the closing-comment post, the recap): wrap the visible short form in OSC 8 hyperlink escape sequences (
\e]8;;<URL>\e\\<short>\e]8;;\e\\) so modern terminals render the number itself as clickable. Where OSC 8 is unsupported (CI logs, dumb terminals), fall back to printing the bare URL on the same line after the number.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 982 lines · 127 tokens per session scan A 37eb87327a67
magpie-security-issue-invalidate is a skill published in the GitHub repository apache/magpie (87 stars, last pushed 5d ago), licensed Apache-2.0. It adds 127 tokens to every session and 11,782 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
persona-project-manager
Coordinate projects — track tasks, schedule meetings, and share docs.
persona-event-coordinator
Plan and manage events — scheduling, invitations, and logistics.
persona-team-lead
Lead a team — run standups, coordinate tasks, and communicate.
recipe-plan-weekly-schedule
Review your Google Calendar week, identify gaps, and add events to fill them.
atmos-migration
This skill helps you migrate a repository to Atmos. It covers native Terraform, Terraform Workspaces, Terramate, Terragrunt, Makefiles, Justfiles, and Taskfiles. It gives minimum-disruption paths, file-layout options, workspace mapping, task-to-command mapping, generatehcl/script decomposition, and the remote-state…
atmos-modernization
Atmos Modernization: migrate deprecated or legacy Atmos patterns to current names, Native CI, Atmos Pro drift detection, dependencies.components, nametemplate, and declared secrets.