skills.rest
florianbuetow
florianbuetowCOMMUNITY
Explore all skills by this author →
Website𝕏@bytetweetsGitHub

fix

Generates code fixes for security vulnerabilities found in scans.

12|1|Updated Feb 9, 2026
Search Tags:#security#vulnerability#code generation#remediation#fix#patch
One-click install
npx skills add https://github.com/florianbuetow/claude-code --skill fix-florianbuetow
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fix
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/fix
Command: npx skills add https://github.com/florianbuetow/claude-code --skill fix-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automatically generates and applies code fixes for identified security vulnerabilities, streamlining the remediation process and reducing security risks.

Core Features & Use Cases

  • Automated Vulnerability Patching: Generates production-ready code to fix security findings.
  • Context-Aware Fixes: Understands the vulnerability's root cause and applies appropriate mitigation strategies.
  • Multiple Fix Depths: Offers options from minimal changes to deep refactoring with regression tests.
  • Use Case: When a security scan flags an SQL injection vulnerability (e.g., INJ-001) in src/db/queries.ts:45, this Skill can automatically generate and suggest a parameterized query to fix it.

Quick Start

Use the fix skill to generate a security patch for finding INJ-001.

Frequently Asked Questions about fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically generate and apply code fixes for security vulnerabilities?▼

Automated vulnerability patching generates production-ready code fixes for identified security vulnerabilities and applies them directly to your source files using the Edit tool.

Can I generate regression tests when remediating security scan findings?▼

Yes, regression tests can be generated during security vulnerability remediation. This Skill supports multiple fix depths, allowing you to choose deep refactoring options that include regression tests alongside the security patches.

How does context-aware vulnerability remediation handle root causes like SQL injection?▼

Context-aware vulnerability remediation understands the root cause of security findings and applies appropriate mitigation strategies. For SQL injection vulnerabilities, it generates parameterized queries to properly secure the code.

Do I need a specific findings file format to generate security patches?▼

You need identified security vulnerabilities to generate security patches. This Skill reads finding records from the `.appsec/findings.json` file and updates these records after applying the generated code fixes.

What is the difference between a quick patch and expert-level refactoring for security vulnerabilities?▼

A quick patch applies minimal changes to fix security vulnerabilities, while expert-level refactoring involves deep code modifications with regression tests. This Skill offers multiple fix depths to address varying remediation requirements.

Related Skills

Explore More Software Engineering Skills→
florianbuetowflorianbuetow
12

verify

Re-run detection methods to verify security fixes and update findings.

Community
Advanced
thisismynewfmail-uithisismynewfmail-ui

requesting-code-review

Verifies code changes before commit via diff analysis, tests, and linters.

Community
Advanced
0x0pointer0x0pointer
13

remediate

Generate implementable remediation patches for findings in findings.json.

Official
Advanced
jcastillotxjcastillotx

Top 100 Web Vulnerabilities Reference

Categorize web vulnerabilities with root causes, impacts, and mitigations.

Community
Advanced