What problem does it solve?
Verifies that git commits address security audit findings without introducing bugs. This skill should be used when the user asks to "verify these commits fix the audit findings", "check if TOB-XXX was addressed", "review the fix branch", "validate remediation commits", "did these changes address the security report", "post-audit remediation review", "compare fix commits to audit report", or when reviewing commits against security audit reports.
Core Features & Use Cases
- Cross-checks findings against commit changes to ensure root causes are addressed
- Maps TOB identifiers and remediation notes to specific commits and diffs
- Generates a structured audit-ready report with evidence and recommendations
- Use case: validating a multi-commit remediation across several files after a security alert
Quick Start
Provide the source and target commit hashes, and optionally an audit report path, to run an automated fix-review pass