security-remediation

Automate security finding remediation with regression tests and evidence generation.

Updated May 28, 2026

Search Tags:#regression testing #automated testing #evidence generation #security remediation #security finding

Ready to run

npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-remediation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-remediation
Source: https://github.com/SensLiao/Claude-code-setting/tree/main/skills/security-remediation
Command: npx skills add https://github.com/SensLiao/Claude-code-setting --skill security-remediation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of addressing security findings by providing automated code fixes, regression testing, and evidence generation.

Core Features & Use Cases

Security Finding Remediation: Accepts security findings and automatically applies fixes based on standardized schemas.
Regression Testing: Ensures the application's security post-remediation through regression tests.
Evidence Generation: Provides evidence for the remediation efforts, including test results and documentation updates.

Quick Start

Trigger a security remediation by saying "修复安全问题" or "修复安全漏洞" with the relevant finding details.

Frequently Asked Questions about security-remediation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate security finding remediation in a CI/CD pipeline?▼

Automated security finding remediation applies code fixes based on standardized schemas within a CI/CD pipeline. It analyzes findings, applies fixes, runs regression tests, and generates evidence documenting the remediation efforts.

What is security remediation evidence generation and why is it needed?▼

Security remediation evidence generation provides proof of remediation efforts by capturing test results and updating documentation like SECURITY.md. It ensures that automated security fixes are verifiable and compliant within development workflows.

How to run regression tests after applying automated security fixes?▼

Regression testing after automated security fixes ensures application security post-remediation. It runs tests automatically once fixes are applied to security findings, verifying codebase integrity and generating test result evidence.

Does security remediation work with existing security tools and platforms?▼

Security remediation integrates with various security tools and platforms to automate finding remediation. It accepts findings, applies fixes, and outputs remediation summaries alongside updates to SECURITY.md.

What are the limitations of automated security remediation for code fixes?▼

Automated security remediation relies on standardized schemas to apply fixes, meaning highly complex or non-standard vulnerabilities may require manual intervention. It operates within CI/CD pipelines and outputs summaries and SECURITY.md updates for tracking.