Verifies that security audit remediation commits correctly address findings without introducing new bugs.
Fix Review is a specialized Claude Code skill designed for post-audit remediation and verification. It performs deep differential analysis between a baseline source commit and target fix commits to ensure that security vulnerabilities—such as those identified in Trail of Bits or other professional reports—are thoroughly addressed. By cross-referencing code changes with specific audit recommendations and scanning for security anti-patterns, it provides a structured verification report that distinguishes between fully fixed, partially fixed, and unaddressed issues, preventing regressions and ensuring a robust security posture during the cleanup phase of development.
Características Principales
01Detection of security anti-patterns and bug introduction risks in new code.
02Differential analysis comparing baseline code against remediation commits.
03Generation of comprehensive FIX_REVIEW_REPORT.md files with evidence-based statuses.
04Automated extraction of findings from security reports (PDF, Markdown, JSON, or URLs).
05Systematic mapping of git changes to specific audit IDs (e.g., TOB-XXX).
060 GitHub stars
Casos de Uso
01Reviewing complex pull requests specifically against a security report's recommendations before merging.
02Validating that a developer's fix branch actually resolves all high-severity findings from a third-party audit.
03Generating a formal post-audit status report to track remediation progress across multiple developers.
