Skip to main content
Back to registry

fix-review

trailofbits/skills

Differential analysis to verify commits address security findings without introducing bugs.

Installs400
Install command
npx skills add https://github.com/trailofbits/skills --skill fix-review
Security audits
Gen Agent Trust HubFAIL
SocketPASS
SnykWARN
About this skill
Differential analysis to verify commits address security findings without introducing bugs. Collect required inputs from user: If user provides multiple target commits, process each separately with the same source. When a security report is provided, retrieve it based on format: Local file (PDF, MD, JSON, HTML): Read the file directly using the Read tool. Claude processes PDFs natively. URL: Fetch web content using the WebFetch tool. Google Drive URL that fails: See references/report-parsing.md for Google Drive fallback logic using gdrive CLI. Parse the report to extract findings: Trail of Bits format: Other formats: See references/report-parsing.md for detailed parsing strategies. For each target commit, analyze the commit range: For each commit in the range: For each finding in the report: Identify relevant commits - Match by: Verify the fix - Check that: Assign status - Based on evidence: Document evidence - For each finding: See references/finding-matching.md for detailed matching strategies.

Source description provided by the upstream skill listing. Community reviews and install context appear in the sections below.

Community Reviews

Latest reviews

Sign in to review

No community reviews yet. Be the first to review.

Browse this skill in context
FAQ
What does fix-review do?

Differential analysis to verify commits address security findings without introducing bugs.

Is fix-review good?

fix-review does not have approved reviews yet, so SkillJury cannot publish a community verdict.

What agent does fix-review work with?

fix-review currently lists compatibility with codex, gemini-cli, opencode, cursor, github-copilot, claude-code.

What are alternatives to fix-review?

Skills in the same category include telegram-bot-builder, flutter-app-size, sharp-edges, iterative-retrieval.

How do I install fix-review?

npx skills add https://github.com/trailofbits/skills --skill fix-review

Related skills

More from trailofbits/skills

Related skills

Alternatives in Software Engineering