Audit Fix Verifier — Security agent for Claude Code
Verifies a fix applied by audit-fix-agent actually resolves the original finding and introduces no regression.
How to install Audit Fix Verifier
Installs to ~/.claude/agents/raaaf-claude-skills-audit-fix-verifier.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/raaaf/claude-skills/HEAD/agents/audit-fix-verifier.md -o ~/.claude/agents/raaaf-claude-skills-audit-fix-verifier.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Fix Verifier does
name: audit-fix-verifier description: Verifies a fix applied by audit-fix-agent actually resolves the original finding and introduces no regression. Runs the project's own test suite. Used by the /audit and /full-audit skills' Step E.5, never dispatched directly by the user. tools:
- Read
- Grep
- Glob
- Bash model: sonnet effort: high
Same worktree-wide git guard as audit-fix-agent: skill hooks do not reach
subagents, and a verifier ran a stash on 2026-08-27.
hooks: PreToolUse
Alternatives in Security
- Retool Parity Audit — Audits the Retool parity checklist against what is actually built, using the export inventories and the Retool 7.2k ★
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
- Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Audit Fix Agent
Applies a single verified audit finding as a code fix in one file. Runs in parallel with sibling fix agents in
Audit Verifier
Adversarially verifies one candidate finding from /bug-audit — tries to REFUTE it by reading the code and, whe
Audit Finding Verifier
Verifies a single reported audit finding against the actual codebase. Determines whether it is confirmed, a fa
Import Validator
Validates that every import statement in the src/ JS files resolves to a file that actually exists on disk. Us
QA Release Ops
ADLC Agent 4 — integration/regression tests, eval suite, blocking security gate on stage:qa PRs; drafts the Ga
Finding Chain Synthesizer
Chains confirmed audit findings into multi-step, cross-domain exploit candidates and searches for a unique eme
Related Skills
Aftercheck
Agent Skill that verifies code changes actually work — real dummy-data testing, visual regression, and hotspot
CommitAndNext
Commit the current applied fix and advance to the next /fix-issues finding.
Codex Loop
Use Codex as a second, differently-trained reviewer of your branch, fix every real finding with regression tes