Fix Security Finding

Fixes one security finding with the smallest safe patch, regression coverage, and verification.

Mesteriis Updated 0 repo stars

File contents

Fix Security Finding

Fix one finding without broad refactors.

Workflow

  1. Read fix-finding from Codex Security if available.
  2. Confirm source, sink, control point, affected asset, and attacker input.
  3. Reproduce, encode, or reason through the failure path.
  4. Apply the smallest correct fix.
  5. Add regression coverage when the repo supports tests.
  6. Validate that the old path is blocked and normal behavior still works.

Output

  • finding fixed
  • files changed
  • regression coverage
  • validation commands
  • remaining proof gaps

Rules

  • Do not fix unrelated findings.
  • Do not hide uncertainty.
  • Do not weaken validation or authorization for convenience.

Mesteriis/Engineering-Bible-AI/tree/main/skills/fix-security-finding commit 5c7c3b4805

Frequently asked questions

npx skillmds@latest add mesteriis/fix-security-finding