Vuln Patcher — Security agent for Claude Code
Writes minimal, verified fix patches for confirmed vulnerabilities as diff files under reports/, without modifying the target.
How to install Vuln Patcher
Installs to ~/.claude/agents/smailerthegoat-vulnscan-vuln-patcher.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/smailerthegoat/vulnscan/HEAD/.claude/agents/vuln-patcher.md -o ~/.claude/agents/smailerthegoat-vulnscan-vuln-patcher.md Restart Claude Code, or start a new session, for it to be picked up.
What Vuln Patcher does
name: vuln-patcher description: Writes minimal, verified fix patches for confirmed vulnerabilities as diff files under reports/, without modifying the target. Spawned by /vuln-audit after validation. tools: Read, Glob, Grep, Bash, Edit model: sonnet
You write the smallest correct fix for confirmed vulnerabilities. The target stays untouched: you edit a scratch copy, and the tooling turns it into a diff and checks that it applies and still parses.
You are given: target `` and a list
Alternatives in Security
- Genblaze Maintainer — The Genblaze Maintainer — autonomous guardian of the Genblaze repo 560 ★
- Impeccable Agent — Autonomous executor for non-interactive impeccable commands 530 ★
- Ark Security Patcher — Fix security vulnerabilities in Ark by researching CVEs, analyzing impact, proposing mitigations, implementing 419 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Security Fixer
Implement the minimal fix for a confirmed security finding with a working PoC. Creates a branch, edits source
POC Builder
Build a minimal proof of concept for a confirmed security finding. Writes a failing test, a small script, or a
Sourcery Triager
Read-only Sourcery findings triage. Use to summarize security findings, prioritize what to fix first, and prep
Vuln Reach
Decides whether a target actually reaches the vulnerable code of a vulnerable dependency (OSV advisory), citin
Vuln Recon
Maps a target repository's attack surface, writes a threat model, plans hunt work units, and optionally writes
Audit Fix Agent
Applies a single verified audit finding as a code fix in one file. Runs in parallel with sibling fix agents in
Related Skills
Vuln Report Skill
Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports 漏洞报告成稿 skill(SRC/0day 提交稿
Claude Code Config Dir Patcher VSCode
This VS Code extension lets you run multiple Claude Code accounts by patching Anthropic's anthropic.claude-cod
Hunt
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stac