remediate-web-vulnerabilities

Apply canonical hardening patterns to fix web vulnerability classes.

9|3|Updated Jun 13, 2026
One-click install
npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill remediate-web-vulnerabilities
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: remediate-web-vulnerabilities
Source: https://github.com/Sir-chawakorn/sanook-cli/tree/main/skills/remediate-web-vulnerabilities
Command: npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill remediate-web-vulnerabilities

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the manual, error-prone process of patching web security vulnerabilities by providing canonical, class-based remediation strategies that go beyond simple band-aid fixes.

Core Features & Use Cases

  • Canonical Remediation: Applies industry-standard fixes like parameterized queries for SQLi, args-array execution for command injection, and context-aware encoding for XSS.
  • Regression Testing: Ensures fixes are effective by replaying exploit payloads to verify the vulnerability is fully neutralized.
  • Use Case: When a security scan identifies an IDOR vulnerability or a SQL injection point, this skill guides the developer to apply the correct architectural fix and verify it with a targeted test case.

Quick Start

Use the remediate-web-vulnerabilities skill to identify and patch all instances of SQL injection in the current codebase by applying parameterized queries and verifying with a regression test.

Frequently Asked Questions about remediate-web-vulnerabilities

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix SQL injection and XSS vulnerabilities in my web app?

To fix SQL injection and XSS vulnerabilities, you apply canonical hardening patterns like parameterized queries for SQLi and context-aware encoding for XSS. This approach replaces unsafe code constructs with secure architectural alternatives rather than using simple band-aid fixes.

What is the best way to remediate IDOR and CSRF vulnerabilities in an application codebase?

The best way to remediate IDOR and CSRF vulnerabilities involves systematic code analysis to identify unsafe constructs and applying class-based remediation strategies. This ensures vulnerabilities are patched using industry-standard architectural fixes instead of temporary patches.

How do I verify that a web vulnerability fix actually neutralizes the exploit?

You verify a web vulnerability fix by replaying exploit payloads against the patched code as a regression test. This automated exploit-replay testing confirms the vulnerability is fully neutralized and prevents regressions in future code changes.

Does this vulnerability remediation approach work for SSRF and insecure deserialization?

Yes, this vulnerability remediation approach works for SSRF and insecure deserialization by applying canonical hardening patterns specific to each class. It targets these critical web vulnerability classes through systematic code analysis and targeted security remediation.

Can I use automated exploit replay testing instead of manual code review for security patching?

Automated exploit-replay testing complements but does not replace the systematic code analysis required for security patching. The process requires analyzing the codebase to replace unsafe constructs with secure alternatives, then verifying the fixes through exploit replay.