skills.rest
jpoley
jpoleyCOMMUNITY
Explore all skills by this author →
Website𝕏@jbpoleyGitHub

security-fixer

Generate secure patches for code vulnerabilities and output unified diffs.

50|9|Updated Oct 15, 2025
Search Tags:#security#static-analysis#code-review#secure-code#unified-diff#patch-generation#vulnerability-remediation
One-click install
npx skills add https://github.com/jpoley/flowspec --skill security-fixer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-fixer
Source: https://github.com/jpoley/flowspec/tree/main/.claude/skills/security-fixer
Command: npx skills add https://github.com/jpoley/flowspec --skill security-fixer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security vulnerabilities often require careful, audited patches that preserve functionality while removing risk. This Skill automates generating secure fixes and producing patch diffs that can be reviewed and applied safely.

Core Features & Use Cases

  • Automated Patch Generation: Create language-aware patches that fix vulnerabilities with minimal changes.
  • Unified Diff Outputs: Produce patch diffs suitable for code review and integration.
  • Validation & Safety: Ensure syntax correctness and security improvements without regressing behavior.

Quick Start

Use the security-fixer skill to generate a patch for a vulnerable function in src/auth.py.

Frequently Asked Questions about security-fixer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically generate patches for security vulnerabilities in my code?▼

Automated patch generation creates language-aware fixes for vulnerabilities by analyzing vulnerable code and producing unified diffs that preserve functionality while removing security risks. The output is ready for code review and safe integration.

What does a unified diff patch do for security remediation?▼

A unified diff displays exact line-by-line changes needed to fix vulnerabilities, enabling reviewers to audit modifications before applying them. This format works across version control systems and integrates directly into existing code review workflows.

Can I use this for static analysis findings across different programming languages?▼

Yes, the Skill generates language-aware patches that adapt to syntax and conventions of different languages, ensuring fixes are idiomatic and correct for each codebase while maintaining consistent security improvements.

How does automated patch generation ensure I don't introduce new bugs when fixing vulnerabilities?▼

Patch generation includes validation and syntax checking to verify that fixes are correct and don't regress existing behavior. Unified diffs allow manual review before application to confirm both security improvements and functional integrity.

What's the difference between this approach and manual security code review?▼

Automated patching accelerates vulnerability remediation by generating candidate fixes instantly, reducing manual effort. Code review remains essential—diffs are produced specifically for auditing, so human verification is built into the workflow, not replaced.

Related Skills

Explore More Software Engineering Skills→
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced
00PrabalK0000PrabalK00
1

pr-review-enforcer

Review diffs and patches for code quality, architecture, and risk.

Community
Advanced
JuanMS20JuanMS20
1

code-review

Analyze code for issues and improvements before merging changes.

Community
Advanced
MinhThang1009MinhThang1009
15

modernize-harden

Scan legacy code for security vulnerabilities and generate a reviewable remediation patch.

Community
Intermediate