Verify git commits address TOB security audit findings and avoid new bugs.
npx skills add https://github.com/sbknana/equipa --skill fix-review-sbknana
Please help me install this Agent Skill. Skill: fix-review Source: https://github.com/sbknana/equipa/tree/main/skills/security/fix-review/skills/fix-review Command: npx skills add https://github.com/sbknana/equipa --skill fix-review-sbknana
Verifies that git commits address security audit findings without introducing bugs.
Provide the source and target commits plus an optional audit report to run a complete fix-review workflow.
High-intent search queries and answers about installing and using this skill.
Verify security audit fixes by mapping commit diffs to TOB findings and generating a formal status report. This review process confirms remediation commits address vulnerabilities without introducing new bugs.
A fix review report is a formal document mapping security audit findings to commit changes and assigning verification statuses like FIXED, PARTIALLY_FIXED, or NOT_ADDRESSED. It validates that remediation commits resolve vulnerabilities safely.
Check for new bugs in a remediation commit by running an automated diff analysis against security audit findings. This workflow verifies that code changes address vulnerabilities without causing additional issues.
Yes, you can review multiple commits or branches for a security audit at once. The fix review workflow performs input gathering and diff analysis across the provided range to map findings to commits.
To run a security fix review, provide the source and target commits. You can also supply an optional audit report to execute the complete workflow and generate a formal verification status.
Statuses assigned during a security audit fix review include FIXED, PARTIALLY_FIXED, and NOT_ADDRESSED. These formal statuses indicate whether commit changes successfully resolve the mapped TOB findings.
trailofbitsMap security audit findings to commits and rate fix quality.
FlintmereReview webhook handlers for signature verification, idempotency, error handling, and observability.
fjor1025Analyze git commits against security audit findings to verify fixes.
SuperlendAnalyze commit changes to verify security audit remediation and generate fix-review reports.
