fix-review
Verify fix commits address audit findings without new bugs
Fix Review
Overview
Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities.
When to Use This Skill
Use this skill when you need to verify fix commits address audit findings without new bugs.
Use this skill when:
- Reviewing commits that address security audit findings
- Verifying that fixes don't introduce new vulnerabilities
- Ensuring code changes properly resolve identified issues
- Validating that remediation efforts are complete and correct
Instructions
This skill helps verify that fix commits properly address audit findings:
- Review Fix Commits: Analyze commits that claim to fix audit findings
- Verify Resolution: Ensure the original issue is properly addressed
- Check for Regressions: Verify no new bugs or vulnerabilities are introduced
- Validate Completeness: Ensure all aspects of the finding are resolved
Review Process
When reviewing fix commits:
- Compare the fix against the original audit finding
- Verify the fix addresses the root cause, not just symptoms
- Check for potential side effects or new issues
- Validate that tests cover the fixed scenario
- Ensure no similar vulnerabilities exist elsewhere
Best Practices
- Review fixes in context of the full codebase
- Verify test coverage for the fixed issue
- Check for similar patterns that might need fixi
Subscribers only
The full skill, its 1 bundled files and every download is included with every paid Complete AI plan.
Details
| Source | trailofbits/skills |
|---|---|
| License | — |
| Risk label | safe ("critical" means the skill may run commands or touch files — read before use) |
| Files | SKILL.md |
| Added | 2026-02-27 |
Related skills
babysit-pr
Babysit a pull request through its bot review rounds: verify, fix, reply, resolve. Use for any babysit or watch-the-PR ask.
clean-code
This skill embodies the principles of "Clean Code" by Robert C. Martin (Uncle Bob). Use it to transform "code that works" into "code that is clean."
code-refactoring-refactor-clean
You are a code refactoring expert specializing in clean code principles, SOLID design patterns, and modern software engineering best practices. Analyze and refactor the provided code to improve its quality, maintainability, and performance.
code-review-checklist
Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability
codebase-cleanup-tech-debt
Identify technical debt from actual code and change history, estimate its impact, and prioritize bounded improvements with explicit assumptions.
codex-review
Professional code review with auto CHANGELOG generation, integrated with Codex AI. Use when you want professional code review before commits, you need automatic CHANGELOG generation, or reviewing large-scale refactoring.
