fix

Generates code fixes for security vulnerabilities found in scans.

12|1|Updated Feb 9, 2026

Search Tags:#security #vulnerability #code generation #remediation #fix #patch

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill fix-florianbuetow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fix
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/fix
Command: npx skills add https://github.com/florianbuetow/claude-code --skill fix-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automatically generates and applies code fixes for identified security vulnerabilities, streamlining the remediation process and reducing security risks.

Core Features & Use Cases

Automated Vulnerability Patching: Generates production-ready code to fix security findings.
Context-Aware Fixes: Understands the vulnerability's root cause and applies appropriate mitigation strategies.
Multiple Fix Depths: Offers options from minimal changes to deep refactoring with regression tests.
Use Case: When a security scan flags an SQL injection vulnerability (e.g., INJ-001) in src/db/queries.ts:45, this Skill can automatically generate and suggest a parameterized query to fix it.

Quick Start

Use the fix skill to generate a security patch for finding INJ-001.

Frequently Asked Questions about fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automatically generate and apply code fixes for security vulnerabilities?▼

Automated vulnerability patching generates production-ready code fixes for identified security vulnerabilities and applies them directly to your source files using the Edit tool.

Can I generate regression tests when remediating security scan findings?▼

Yes, regression tests can be generated during security vulnerability remediation. This Skill supports multiple fix depths, allowing you to choose deep refactoring options that include regression tests alongside the security patches.

How does context-aware vulnerability remediation handle root causes like SQL injection?▼

Context-aware vulnerability remediation understands the root cause of security findings and applies appropriate mitigation strategies. For SQL injection vulnerabilities, it generates parameterized queries to properly secure the code.

Do I need a specific findings file format to generate security patches?▼

You need identified security vulnerabilities to generate security patches. This Skill reads finding records from the `.appsec/findings.json` file and updates these records after applying the generated code fixes.

What is the difference between a quick patch and expert-level refactoring for security vulnerabilities?▼

A quick patch applies minimal changes to fix security vulnerabilities, while expert-level refactoring involves deep code modifications with regression tests. This Skill offers multiple fix depths to address varying remediation requirements.