skills.rest
SensLiao
SensLiaoCOMMUNITY
Explore all skills by this author →
GitHub

security-remediation

Automate security finding remediation with regression tests and evidence generation.

Updated May 28, 2026
Search Tags:#regression testing#automated testing#evidence generation#security remediation#security finding
One-click install
npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-remediation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-remediation
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-remediation
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-remediation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of addressing security findings by providing automated code fixes, regression testing, and evidence generation.

Core Features & Use Cases

  • Security Finding Remediation: Accepts security findings and automatically applies fixes based on standardized schemas.
  • Regression Testing: Ensures the application's security post-remediation through regression tests.
  • Evidence Generation: Provides evidence for the remediation efforts, including test results and documentation updates.

Quick Start

Trigger a security remediation by saying "修复安全问题" or "修复安全漏洞" with the relevant finding details.

Frequently Asked Questions about security-remediation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security finding remediation in a CI/CD pipeline?▼

Automated security finding remediation applies code fixes based on standardized schemas within a CI/CD pipeline. It analyzes findings, applies fixes, runs regression tests, and generates evidence documenting the remediation efforts.

What is security remediation evidence generation and why is it needed?▼

Security remediation evidence generation provides proof of remediation efforts by capturing test results and updating documentation like SECURITY.md. It ensures that automated security fixes are verifiable and compliant within development workflows.

How to run regression tests after applying automated security fixes?▼

Regression testing after automated security fixes ensures application security post-remediation. It runs tests automatically once fixes are applied to security findings, verifying codebase integrity and generating test result evidence.

Does security remediation work with existing security tools and platforms?▼

Security remediation integrates with various security tools and platforms to automate finding remediation. It accepts findings, applies fixes, and outputs remediation summaries alongside updates to SECURITY.md.

What are the limitations of automated security remediation for code fixes?▼

Automated security remediation relies on standardized schemas to apply fixes, meaning highly complex or non-standard vulnerabilities may require manual intervention. It operates within CI/CD pipelines and outputs summaries and SECURITY.md updates for tracking.

Related Skills

Explore More Software Engineering Skills→
c0x12cc0x12c
96

terraform-review

Score Terraform PR changes against an 8-category best practices checklist.

Official
Advanced
alo-expalo-exp
6

GSD — Security Review

Review code changes against OWASP defense-in-depth and generate SECURITY.md gates.

Official
Advanced
infantesromeroadrianinfantesromeroadrian

pentest-cicd-redteam

Automates security assessments and red teaming in CI/CD pipelines via GitHub Actions, GitLab CI, Jenkins, and scanning tools.

Community
Advanced
viktorbezdekviktorbezdek
10

security-hardening-audit

Identify and document security gaps through a structured multi-pass audit.

Community
Advanced