Fix Code Vulnerability

About

This skill provides a comprehensive framework for addressing security vulnerabilities within a codebase, moving beyond surface-level fixes to ensure robust protection against exploits. By emphasizing complete test file analysis, exhaustive code path tracing, and accurate security impact documentation, it enables developers to implement patches at the correct abstraction level. Whether dealing with injection vulnerabilities, cross-site scripting, or improper input validation, the skill guides users through matching test expectations exactly and handling complex edge cases like Unicode variants and control characters to prevent regressions and ensure long-term code integrity.

Key Features

• Comprehensive code path tracing to map all entry points to vulnerable code
• Guidance on matching specific test expectations, error types, and exception messages
• In-depth analysis of attack vectors and potential security impacts
• 16 GitHub stars
• Systematic workflow for identifying and patching CWE-classified vulnerabilities
• Detailed verification checklists covering edge cases, Unicode, and boundary conditions

Use Cases

• Patching specific security flaws identified during automated scans or security audits
• Resolving failing security-related test cases within a CI/CD pipeline
• Refactoring central validation logic to address systemic vulnerabilities like CRLF injection