code-fixing

To auto-fix security vulnerabilities and lint errors, this Skill applies vetted fixes identified by code scanners, executes available auto-fixers for formatting, and runs tests to ensure remediation does not introduce regressions. It prioritizes CRITICAL and HIGH severity findings before addressing lower-severity items.

Yes, you can patch vulnerable dependencies discovered during CI scans. The Skill updates vulnerable dependencies when safe to do so, runs verification, and generates a structured report of changed files and verification results for your review.

The best way to verify code changes after remediating static-analysis errors is to re-run linters and tests immediately after applying fixes. The Skill executes this verification process automatically and produces a structured report detailing the verification outcomes.

Yes, the tool fixes lint and formatting corrections automatically by executing available auto-fixers and formatters. For issues that cannot be auto-fixed, it performs targeted manual code edits and re-runs linters to verify the corrections.

To prioritize vulnerability patches when remediating code scanning results, the Skill focuses remediation on CRITICAL and HIGH severity findings before addressing lower-severity items. This triage approach ensures the most significant security vulnerabilities are resolved first.

A limitation of auto-fixing security vulnerabilities is that not all issues can be resolved automatically. The Skill relies on available auto-fixers for safe patches and dependency updates, requiring manual remediation and targeted code edits for complex static-analysis errors.