What problem does it solve? Turning a reviewed list of audit findings into an executable, prioritized remediation plan is slow and error-prone: dependencies get missed, severity ordering is inconsistent, and rollback or approval requirements are forgotten. This Skill converts validated audit findings into a structured remediation plan with owners, complexity estimates, verification steps, rollout, and rollback guidance. ## Core Features & Use Cases - Dependency-aware prioritization: Builds a directed dependency graph from finding prerequisites, shared root causes, and release constraints, rejecting cycles and ordering containment and critical security findings first. - Complexity estimation and phasing: Estimates each item as low, medium, high, or very-high complexity with recorded rationale, and groups work into stable milestone phase IDs that downstream execution skills can consume. - Schema-validated outputs: Emits reports/audit-remediation-plan.json (schema version 2.1.0, bound to the source review's auditRunId and SHA-256 digest) plus a Markdown version preserving ordering and traceability. - Use Case: After audit-review-findings confirms a set of security findings, invoke this Skill to produce a phased remediation plan where each item has an owner role, acceptance criteria, tests, approvals, and rollback steps, ready for audit-remediation to execute. ## Quick Start Use the audit-plan-remediation skill to turn the reviewed findings in reports/code-audit-review.json into a prioritized remediation plan with phases, owners, and rollback steps.
