# Fix Security Finding

> Fixes one security finding with the smallest safe patch, regression coverage, and verification.

- Skill: `mesteriis/fix-security-finding` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add mesteriis/fix-security-finding`
- Raw SKILL.md: https://api.skillmd.com/api/skills/mesteriis/fix-security-finding/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Mesteriis (https://skillmd.com/u/mesteriis)
- Updated: 2026-08-19
- Page: https://skillmd.com/skills/mesteriis/fix-security-finding

---


# Fix Security Finding

Fix one finding without broad refactors.

## Workflow

1. Read `fix-finding` from Codex Security if available.
2. Confirm source, sink, control point, affected asset, and attacker input.
3. Reproduce, encode, or reason through the failure path.
4. Apply the smallest correct fix.
5. Add regression coverage when the repo supports tests.
6. Validate that the old path is blocked and normal behavior still works.

## Output

- finding fixed
- files changed
- regression coverage
- validation commands
- remaining proof gaps

## Rules

- Do not fix unrelated findings.
- Do not hide uncertainty.
- Do not weaken validation or authorization for convenience.