# Ackit Scan And Fix

> Run ACKit scan, interpret findings by severity, and apply safe fixes with suppression hygiene.

- Skill: `cynrath/ackit-scan-and-fix` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add cynrath/ackit-scan-and-fix`
- Raw SKILL.md: https://api.skillmd.com/api/skills/cynrath/ackit-scan-and-fix/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: Cynrath (https://skillmd.com/u/cynrath)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/cynrath/ackit-scan-and-fix

---


# Scan and Fix

Activate when the user asks to scan, audit, or clean up the repository.

See [severity playbook](references/severity-playbook.md) for triage order.

## Steps

1. `ackit scan` (add `--ci` in CI contexts; `--format terminal|json|sarif|markdown|html`, `--baseline <file>` / `--write-baseline <file>`, `--changed` / `--staged` / `--since <ref>` / `--range <a..b>` for incremental sets) and read findings grouped by severity (`docs/reference/rules.md`).
2. Fix critical/high first: rotate exposed credentials out-of-band, remove keys, correct root-escape references. Values are never printed; do not paste findings into external services.
3. Suppress false positives ONLY inline with `# ackit-ignore:ACKITnnn <reason>` on the finding line or the line above (covers that line plus the next line); every applied bypass stays visible as a non-suppressible `ACKIT099` advisory. Policy-level suppressions require `reason` and support `expiresAt`; locked rules (`locked: true`) can never be weakened (`POL-LOCKED-CONFLICT`).
4. Re-scan (`ackit scan --ci`) and confirm exit 0 or an explicit accepted-risk list. Confirm offline policy with `ackit policy check` / `ackit config check` where thresholds or extends changed.

## Notes

- Unknown-extension files are always scanned; do not "fix" by renaming secrets away.
- Never weaken rules, thresholds, or baselines to make output green.
- Resolution is offline by construction; remote fetches never happen.