fix-review

Name: fix-review
Availability: InStock
Author: amano

Analyze git commit ranges against security audit findings and generate fix review reports.

Updated Jan 24, 2026

Search Tags:#code review #security #audit #commit analysis #bug detection #vulnerability remediation

Ready to run

npx skills add https://github.com/amano--/call-center --skill fix-review-amano

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fix-review
Source: https://github.com/amano--/call-center/tree/main/.gemini/antigravity/skills/trailofbits-security/fix-review
Command: npx skills add https://github.com/amano--/call-center --skill fix-review-amano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures that code changes intended to fix security vulnerabilities actually address the issues without introducing new bugs or regressions.

Core Features & Use Cases

Security Fix Validation: Automatically checks if commits resolve identified security findings.
Bug Introduction Detection: Scans for anti-patterns that indicate new vulnerabilities or bugs.
Use Case: After a security audit, use this Skill to review the remediation branch, confirming that all reported findings (e.g., TOB-XXX) are fixed and no new issues have been created.

Quick Start

Use the fix-review skill to analyze commits from source abc123 to target def456 against the security report located at ./audit_report.pdf.

Frequently Asked Questions about fix-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I verify security fixes in git commits without introducing new bugs?▼

Verifying security fixes involves analyzing a git commit range against a security report to ensure findings are resolved. This process detects security anti-patterns in the code changes to prevent new bugs or regressions from being introduced.

What is the best way to check if my remediation branch addresses all security audit findings?▼

Checking a remediation branch involves mapping security findings from an audit report to recent code changes. This confirms that identified vulnerabilities are resolved and no new security issues are created.

Can I use a PDF security report to validate vulnerability remediation across a commit range?▼

You can use a PDF security report to validate vulnerability remediation by extracting findings from the document and mapping them against the specified commit range. This generates a detailed review of the applied fixes.

How do I detect security anti-patterns introduced during vulnerability remediation?▼

Detecting security anti-patterns requires scanning the code changes within a specified commit range. The analysis identifies insecure practices introduced during the fix, ensuring the remediation effort does not create additional vulnerabilities.

Does fix-review work with specific git commit hashes for analyzing code changes?▼

Yes, fix-review works by accepting a source and target commit hash. It analyzes the specified commit range against the provided security report to generate a detailed fix review.