skills.rest
tbeack
tbeackCOMMUNITY
Explore all skills by this author →
GitHub

sec-review-fixes

Orchestrate security review findings into diffs, regression tests, and PRs.

7|3|Updated Mar 31, 2026
Search Tags:#automation#security#pull-request#regression-test#auditable-workflow#diff-generation
One-click install
npx skills add https://github.com/tbeack/fsad_playbook --skill sec-review-fixes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sec-review-fixes
Source: https://github.com/tbeack/fsad_playbook/tree/main/skills/sec-review-fixes
Command: npx skills add https://github.com/tbeack/fsad_playbook --skill sec-review-fixes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Companion to sec-review-team. This Skill orchestrates security findings into deterministic diffs, regression tests, commit messages, and PRs, enabling safe, auditable remediation workflows.

Core Features & Use Cases

  • End-to-end fix orchestration for security findings, generating per-finding diffs, tests, and PRs with interactive approval and safeguards.
  • Supports multiple modes including default interactive flow, --dry-run, and --re-verify to re-check fixes against specific IDs.
  • Produces structured artifacts under .planning/sec-review-fixes for review and hand-off to execution pipelines.
  • Enforces strong safety constraints: branch-only commits, no pushes to main, and clean-working-tree requirements before applying fixes.

Quick Start

Invoke the sec-review-fixes skill on the prepared findings to generate patch proposals, regression tests, and commit messages for review.

Frequently Asked Questions about sec-review-fixes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security finding remediation into pull requests?▼

Security finding remediation is automated by orchestrating findings into deterministic diffs, regression tests, commit messages, and branch-based pull requests. This process enforces safety guardrails and generates structured artifacts for review and approval within CI/CD environments.

What is the best way to generate auditable regression tests for security fixes?▼

Auditable regression tests for security fixes are generated by processing security findings through an orchestrated remediation workflow. The system automatically creates per-finding diffs and tests, storing structured artifacts under .planning/sec-review-fixes for review and hand-off to execution pipelines.

Can I use a dry-run mode to preview security fixes before applying them?▼

Yes, a dry-run mode is supported to preview security fixes before they are applied. The workflow also supports a re-verify mode to re-check fixes against specific IDs, ensuring that patch proposals and regression tests are validated before execution.

Does the security fix orchestration workflow enforce branch-based commits?▼

Yes, the security fix orchestration workflow enforces branch-based commits and strictly prevents pushes to main. It also requires a clean working tree before applying fixes, ensuring safe and auditable remediation workflows.

How do I re-verify applied security fixes against specific finding IDs?▼

Applied security fixes are re-verified against specific finding IDs using the dedicated re-verify mode. This mode re-checks the generated diffs and regression tests to ensure the security remediation remains valid and auditable.

Related Skills

Explore More Software Engineering Skills→
lanegridlanegrid
59

git-workflow

Enforce branching strategies, Conventional Commits, and PR workflows in Git.

Official
Intermediate
omeraltnomeraltn

agency-api-tester

Validate RESTful API functionality, security, and performance in CI/CD pipelines.

Community
Advanced
0xHarbs0xHarbs
1

solidity-audit

Audit Solidity contracts for vulnerabilities using Slither, Aderyn, and 104 patterns.

Community
Advanced
samibrahmisamibrahmi

security_scan

Run three security scanners in parallel and aggregate prioritized risk summaries.

Community
Advanced