security-fixer

Generate secure patches for code vulnerabilities and output unified diffs.

50|9|Updated Oct 15, 2025

Search Tags:#security #static-analysis #code-review #secure-code #unified-diff #patch-generation #vulnerability-remediation

Ready to run

npx skills add https://github.com/jpoley/flowspec --skill security-fixer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-fixer
Source: https://github.com/jpoley/flowspec/tree/main/.claude/skills/security-fixer
Command: npx skills add https://github.com/jpoley/flowspec --skill security-fixer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security vulnerabilities often require careful, audited patches that preserve functionality while removing risk. This Skill automates generating secure fixes and producing patch diffs that can be reviewed and applied safely.

Core Features & Use Cases

Automated Patch Generation: Create language-aware patches that fix vulnerabilities with minimal changes.
Unified Diff Outputs: Produce patch diffs suitable for code review and integration.
Validation & Safety: Ensure syntax correctness and security improvements without regressing behavior.

Quick Start

Use the security-fixer skill to generate a patch for a vulnerable function in src/auth.py.

Frequently Asked Questions about security-fixer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automatically generate patches for security vulnerabilities in my code?▼

Automated patch generation creates language-aware fixes for vulnerabilities by analyzing vulnerable code and producing unified diffs that preserve functionality while removing security risks. The output is ready for code review and safe integration.

What does a unified diff patch do for security remediation?▼

A unified diff displays exact line-by-line changes needed to fix vulnerabilities, enabling reviewers to audit modifications before applying them. This format works across version control systems and integrates directly into existing code review workflows.

Can I use this for static analysis findings across different programming languages?▼

Yes, the Skill generates language-aware patches that adapt to syntax and conventions of different languages, ensuring fixes are idiomatic and correct for each codebase while maintaining consistent security improvements.

How does automated patch generation ensure I don't introduce new bugs when fixing vulnerabilities?▼

Patch generation includes validation and syntax checking to verify that fixes are correct and don't regress existing behavior. Unified diffs allow manual review before application to confirm both security improvements and functional integrity.

What's the difference between this approach and manual security code review?▼

Automated patching accelerates vulnerability remediation by generating candidate fixes instantly, reducing manual effort. Code review remains essential—diffs are produced specifically for auditing, so human verification is built into the workflow, not replaced.