skills.rest
opsMachine
opsMachineOFFICIAL
Explore all skills by this author →
WebsiteGitHub

4-security-fix

Apply security fixes and re-run validation tests until they pass.

1|Updated Feb 10, 2026
Search Tags:#automation#security#vulnerability#verification#audit#remediation
One-click install
npx skills add https://github.com/opsMachine/OM-Agency --skill 4-security-fix
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: 4-security-fix
Source: https://github.com/opsMachine/OM-Agency/tree/main/skills/4-security-fix
Command: npx skills add https://github.com/opsMachine/OM-Agency --skill 4-security-fix

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This phase guides engineers to implement fixes for security vulnerabilities identified in Phase 3 and ensures the fixes are verified and the item is marked DONE, looping back when needed.

Core Features & Use Cases

  • Automated fix application: Apply code changes to remediate the identified vulnerability.
  • Test-driven verification: Re-run failing tests until they pass and ensure no regressions.
  • Progress tracking: Update SECURITY_PLAN.md to DONE and loop back to Phase 3 if more work remains.

Quick Start

Run /4-security-fix after Phase 3 generates a failing test to implement and verify the fix.

Frequently Asked Questions about 4-security-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security vulnerability remediation after a test fails?▼

Automating security vulnerability remediation involves applying code fixes to address identified issues and re-running the validation test suite. This Skill applies the remediation, verifies the fix through tests, and updates the audit status.

What is the best way to verify security fixes without causing regressions?▼

Verifying security fixes without regressions requires re-running the failing security tests until they pass. This Skill validates applied remediations through the test suite to ensure fixes work and no regressions are introduced.

How do I track security audit progress and mark resolved vulnerabilities as done?▼

Tracking security audit progress requires updating the project's security plan document. This Skill sets the task status to DONE in SECURITY_PLAN.md after fixes are verified, and loops back to the backlog if remaining items exist.

Does this security fix automation loop through remaining vulnerability backlog items?▼

Yes, this security fix automation loops back to Phase 3 when remaining backlog items exist. It applies fixes, validates them through the security test suite, and repeats until the entire vulnerability backlog is resolved.

When do I need to run automated security remediation in my workflow?▼

You need to run automated security remediation after Phase 3 generates a failing security test. This Skill implements and verifies the fix, ensuring your codebase addresses vulnerabilities before progressing to the next workflow phase.

Related Skills

Explore More Software Engineering Skills→
opsMachineopsMachine
1

2-security-critique

Review SECURITY_PLAN.md findings, remove false positives, and generate a ranked backlog.

Official
Intermediate
DalomeveDalomeve
3

ren-wu-shou-wei-qi

Validate task completion with DONE_CHECKLIST and EVIDENCE artifacts.

Community
Advanced
askaretaskaret

dotnet-change

Identify impacted .NET projects and update tests for minimal changes.

Community
Intermediate
Dhruvipatel0514Dhruvipatel0514
1

code-auditor

Identify and fix OWASP security vulnerabilities in source code repositories.

Community
Intermediate