Audit Fix Agent — Security agent for Claude Code
Applies a single verified audit finding as a code fix in one file.
How to install Audit Fix Agent
Installs to ~/.claude/agents/raaaf-claude-skills-audit-fix-agent.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/raaaf/claude-skills/HEAD/agents/audit-fix-agent.md -o ~/.claude/agents/raaaf-claude-skills-audit-fix-agent.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Fix Agent does
name: audit-fix-agent description: Applies a single verified audit finding as a code fix in one file. Runs in parallel with sibling fix agents in a shared working tree. Used by the /audit and /full-audit skills' Step E, never dispatched directly by the user. tools:
- Read
- Edit
- Write
- MultiEdit
- Grep
- Glob
- Bash model: sonnet effort: medium
Skill-frontmatter hooks apply to the main session only, not to subagents
(docs: hooks.md "Hook scope"). Without this block the w
Alternatives in Security
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
- Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
- Offensive Security Engineer — Red-team the verification engine 179 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Audit Fix Verifier
Verifies a fix applied by audit-fix-agent actually resolves the original finding and introduces no regression.
Finding Chain Synthesizer
Chains confirmed audit findings into multi-step, cross-domain exploit candidates and searches for a unique eme
Security Fixer
Implement the minimal fix for a confirmed security finding with a working PoC. Creates a branch, edits source
Worthiness Evaluator
Advisory test-worthiness audit for the emergent surface. Reads only the phase''s changed test files plus their
ForensicAgent
Forensic security analyst — PII detection, secret scanning, identity leak auditing across git history, staged
Fallow
Run a codebase-intelligence audit (fallow) scoped to working-tree changes and report raw findings — dead code,
Related Skills
UX Fix
Opt-in fix loop. Reads the latest report from .ux/, validates working tree, and applies findings as atomic com
Re Audit
Fix-review / re-audit. Takes a prior audit report + the current tree and classifies every prior finding FIXED
Sibling Sweep
Sibling sweep — find the members the fix never reached