cc74ad0bd0
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
- .woodpecker.yaml: image paths -> library/autojanet-{agent,dispatcher}
- .woodpecker.yaml: secret names RS_HARBOR_USER / RS_HARBOR_PASS (global)
- container/Dockerfile: restore COPY skills/, skills/ populated from opencode config
- skills/: 84 opencode skills bundled into image
- k8s/manifests: update image refs to library/
54 lines
1.8 KiB
Markdown
54 lines
1.8 KiB
Markdown
---
|
|
name: fix-review
|
|
description: "Verify fix commits address audit findings without new bugs"
|
|
risk: safe
|
|
source: "https://github.com/trailofbits/skills/tree/main/plugins/fix-review"
|
|
date_added: "2026-02-27"
|
|
---
|
|
|
|
# Fix Review
|
|
|
|
## Overview
|
|
|
|
Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities.
|
|
|
|
## When to Use This Skill
|
|
|
|
Use this skill when you need to verify fix commits address audit findings without new bugs.
|
|
|
|
Use this skill when:
|
|
- Reviewing commits that address security audit findings
|
|
- Verifying that fixes don't introduce new vulnerabilities
|
|
- Ensuring code changes properly resolve identified issues
|
|
- Validating that remediation efforts are complete and correct
|
|
|
|
## Instructions
|
|
|
|
This skill helps verify that fix commits properly address audit findings:
|
|
|
|
1. **Review Fix Commits**: Analyze commits that claim to fix audit findings
|
|
2. **Verify Resolution**: Ensure the original issue is properly addressed
|
|
3. **Check for Regressions**: Verify no new bugs or vulnerabilities are introduced
|
|
4. **Validate Completeness**: Ensure all aspects of the finding are resolved
|
|
|
|
## Review Process
|
|
|
|
When reviewing fix commits:
|
|
|
|
1. Compare the fix against the original audit finding
|
|
2. Verify the fix addresses the root cause, not just symptoms
|
|
3. Check for potential side effects or new issues
|
|
4. Validate that tests cover the fixed scenario
|
|
5. Ensure no similar vulnerabilities exist elsewhere
|
|
|
|
## Best Practices
|
|
|
|
- Review fixes in context of the full codebase
|
|
- Verify test coverage for the fixed issue
|
|
- Check for similar patterns that might need fixing
|
|
- Ensure fixes follow security best practices
|
|
- Document the resolution approach
|
|
|
|
## Resources
|
|
|
|
For more information, see the [source repository](https://github.com/trailofbits/skills/tree/main/plugins/fix-review).
|