aa71e76eb9
- Add date_added to all 950+ skills for complete tracking - Update version to 6.5.0 in package.json and README - Regenerate all indexes and catalog - Sync all generated files Features from merged PR #150: - Stars/Upvotes system for community-driven discovery - Auto-update mechanism via START_APP.bat - Interactive Prompt Builder - Date tracking badges - Smart auto-categorization All skills validated and indexed. Made-with: Cursor
55 lines
1.8 KiB
Markdown
55 lines
1.8 KiB
Markdown
---
|
|
name: fix-review
|
|
description: "Verify fix commits address audit findings without new bugs"
|
|
risk: safe
|
|
source: "https://github.com/trailofbits/skills/tree/main/plugins/fix-review"
|
|
date_added: "2026-02-27"
|
|
---
|
|
|
|
# Fix Review
|
|
|
|
## Overview
|
|
|
|
Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities.
|
|
|
|
## When to Use This Skill
|
|
|
|
Use this skill when you need to verify fix commits address audit findings without new bugs.
|
|
|
|
Use this skill when:
|
|
- Reviewing commits that address security audit findings
|
|
- Verifying that fixes don't introduce new vulnerabilities
|
|
- Ensuring code changes properly resolve identified issues
|
|
- Validating that remediation efforts are complete and correct
|
|
|
|
## Instructions
|
|
|
|
This skill helps verify that fix commits properly address audit findings:
|
|
|
|
1. **Review Fix Commits**: Analyze commits that claim to fix audit findings
|
|
2. **Verify Resolution**: Ensure the original issue is properly addressed
|
|
3. **Check for Regressions**: Verify no new bugs or vulnerabilities are introduced
|
|
4. **Validate Completeness**: Ensure all aspects of the finding are resolved
|
|
|
|
## Review Process
|
|
|
|
When reviewing fix commits:
|
|
|
|
1. Compare the fix against the original audit finding
|
|
2. Verify the fix addresses the root cause, not just symptoms
|
|
3. Check for potential side effects or new issues
|
|
4. Validate that tests cover the fixed scenario
|
|
5. Ensure no similar vulnerabilities exist elsewhere
|
|
|
|
## Best Practices
|
|
|
|
- Review fixes in context of the full codebase
|
|
- Verify test coverage for the fixed issue
|
|
- Check for similar patterns that might need fixing
|
|
- Ensure fixes follow security best practices
|
|
- Document the resolution approach
|
|
|
|
## Resources
|
|
|
|
For more information, see the [source repository](https://github.com/trailofbits/skills/tree/main/plugins/fix-review).
|