agent security skill risk: low
Security Audit Fix Verifier
The prompt instructs the model to verify that fix commits properly address security audit findings without introducing new bugs or vulnerabilities by reviewing commits, checking ro…
SKILL 1 file
SKILL.md
--- name: antigravity-awesome-skills-fix-review-c6c92b1b description: "Verify fix commits address audit findings without new bugs" --- # Fix Review ## Overview Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities. ## When to Use This Skill Use this skill when you need to verify fix commits address audit findings without new bugs. Use this skill when: - Reviewing commits that address security audit findings - Verifying that fixes don't introduce new vulnerabilities - Ensuring code changes properly resolve identified issues - Validating that remediation efforts are complete and correct ## Instructions This skill helps verify that fix commits properly address audit findings: 1. **Review Fix Commits**: Analyze commits that claim to fix audit findings 2. **Verify Resolution**: Ensure the original issue is properly addressed 3. **Check for Regressions**: Verify no new bugs or vulnerabilities are introduced 4. **Validate Completeness**: Ensure all aspects of the finding are resolved ## Review Process When reviewing fix commits: 1. Compare the fix against the original audit finding 2. Verify the fix addresses the root cause, not just symptoms 3. Check for potential side effects or new issues 4. Validate that tests cover the fixed scenario 5. Ensure no similar vulnerabilities exist elsewhere ## Best Practices - Review fixes in context of the full codebase - Verify test coverage for the fixed issue - Check for similar patterns that might need fixing - Ensure fixes follow security best practices - Document the resolution approach ## Resources For more information, see the [source repository](https://github.com/trailofbits/skills/tree/main/plugins/fix-review). ## Limitations - Use this skill only when the task clearly matches the scope described above. - Do not treat the output as a substitute for environment-specific validation, testing, or expert review. - Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
REQUIRED CONTEXT
- fix commits
- original audit findings
OPTIONAL CONTEXT
- full codebase context
- test coverage
ROLES & RULES
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
EXPECTED OUTPUT
- Format
- unknown
SUCCESS CRITERIA
- Verify fix commits address audit findings
- Ensure no new bugs or vulnerabilities introduced
- Confirm root cause addressed
- Validate test coverage for fixed scenario
CAVEATS
- Dependencies
-
- fix commits
- original audit findings
- Missing context
-
- Input format (how commits, audit findings, or code are provided)
- Desired output format or report structure
- Success criteria or pass/fail thresholds
- Ambiguities
-
- The repeated phrasing 'verify fix commits address audit findings without new bugs' does not clarify what constitutes sufficient evidence of resolution.
QUALITY
- OVERALL
- 0.71
- CLARITY
- 0.82
- SPECIFICITY
- 0.58
- REUSABILITY
- 0.78
- COMPLETENESS
- 0.62
IMPROVEMENT SUGGESTIONS
- Add an explicit 'Inputs' section listing required data (e.g., commit hashes, original audit report).
- Define a standard output template (e.g., sections for root-cause verification, regression checks, test coverage).
- Replace high-level steps with concrete review criteria or checklists.
USAGE
Copy the prompt above and paste it into your AI of choice — Claude, ChatGPT, Gemini, or anywhere else you're working. Replace any placeholder sections with your own context, then ask for the output.
MORE FOR AGENT
- MoltPass Client for AI Agent Identities agent security
- Supply Chain Dependency Risk Auditor agent security
- Supply Chain Dependency Risk Auditor agent security
- Threat Modeling Security Expert agent security
- Security Bluebook Policy Builder agent security
- Security Bluebook Policy Builder agent security
- Security Blue Book Policy Builder agent security
- Threat Modeling Security Architecture Expert agent security
- Supply Chain Dependency Risk Auditor agent security
- Threat Modeling Security Expert agent security
- SIEM Detection Rule Tuning Guide agent security
- AI File Metadata Compliance Auditor agent security
- Azure Storage Misconfiguration Audit Reporter agent security
- Implementing PAM for Database Access agent security
- AFL++ Coverage-Guided Fuzzing Procedure agent security
- Supply Chain Attack Simulation Detector agent security
- Active Directory ACL Abuse Analyzer agent security
- Privileged Access Workstation Implementation Guide agent security
- SSRF Vulnerability Testing and Reporting Guide agent security
- Security Audit Fix Reviewer agent security
- AWS IAM Privilege Escalation Detector agent security
- SSL/TLS Security Assessment with Sslyze agent security
- GCP Penetration Testing with GCPBucketBrute agent security
- AWS CloudTrail Anomaly Detection Guide agent security
- Security Audit Fix Commit Reviewer agent security