fix-security-issue

Apply validated security remediation plans from GitHub issue reviews.

8.1k|1.2k|Updated Feb 24, 2026

Search Tags:#testing #security #github #remediation #branching #code-review #issue-tracking

Ready to run

npx skills add https://github.com/NVIDIA/OpenShell --skill fix-security-issue-nvidia

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fix-security-issue
Source: https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills/fix-security-issue
Command: npx skills add https://github.com/NVIDIA/OpenShell --skill fix-security-issue-nvidia

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates identifying security issues that are ready for action, reads the security review, and implements the approved remediation plan to reduce risk in a repository.

Core Features & Use Cases

Enforces that only issues labeled topic:security and state:agent-ready with a legitimate review are processed.
Orchestrates the remediation workflow from plan extraction to branch creation, code changes, testing, and PR submission.
Supports configurable trigger keywords such as fix security issue, remediate security, implement security fix, patch vulnerability.

Quick Start

Tell the agent to fix security issue #<id> and it will orchestrate the remediation workflow from review to PR.

Frequently Asked Questions about fix-security-issue

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security remediation for GitHub issues?▼

Automating security remediation involves processing GitHub issues labeled topic:security and state:agent-ready, extracting the approved plan from security-review-agent comments, applying code edits, running tests, and opening a verification PR.

What is required to patch a vulnerability from a GitHub code review?▼

Patching a vulnerability requires a GitHub issue labeled state:agent-ready and topic:security, alongside a security-review-agent comment containing a legitimate concern and a concrete remediation plan to execute.

How does an agent implement a security fix across a repository?▼

An agent implements a security fix by orchestrating workflow steps from plan extraction to branch creation, applying validated code changes, updating documentation, executing tests, and submitting a pull request.

Can I trigger automated vulnerability patching using specific keywords?▼

Yes, automated vulnerability patching can be triggered using configurable keywords such as fix security issue, remediate security, implement security fix, and patch vulnerability to start the workflow.

Will the agent process a security issue without a remediation plan?▼

No, the agent will not process a security issue without a remediation plan; it requires a security-review-agent comment confirming a legitimate concern and providing a concrete plan before initiating any code changes.