Fix Finding — Security skill for Claude Code
Auto-fix a specific security finding by editing the IaC file directly.
How to install Fix Finding
Installs to ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-fix-finding/SKILL.md
mkdir -p ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-fix-finding && curl -fsSL https://raw.githubusercontent.com/uttej-badwane/secure-cloud-prompt-engineering/HEAD/commands/fix-finding.md -o ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-fix-finding/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Fix Finding does
name: fix-finding description: Auto-fix a specific security finding by editing the IaC file directly
Apply a targeted fix to a specific security finding identified in a prior review.
Steps
Parse the argument — accept either:
- A finding number from the most recent report (e.g.,
/fix-finding 3) - A description of what to fix (e.g.,
/fix-finding "s3 public access" terraform/main.tf)
- A finding number from the most recent report (e.g.,
Read the relevant file(s) to understand current state.
Apply the minimal, correct
Alternatives in Security
- Security Best Practices — Review code for language-specific security vulnerabilities 14.6k ★
- Deepsec — Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents 7.8k ★
- Design Compliance — Audit or generate regulation-specific UI patterns for HIPAA, PCI DSS, or ADA compliance 309 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Heuristic Evaluation
You are running a structured usability audit. Do not produce a general list of suggestions. Every finding must
Exploit Confirm
Prove a SUSPECTED finding with one targeted, SOC-stealth, operator-supervised confirmation probe (confirm_ too
AuraKit
npx @smorky85/aurakit Fullstack development skill with 37 modes (BUILD/FIX/CLEAN/DEPLOY/REVIEW + 32 extended),
Obey
Rule enforcement plugin. Save rules with natural language, enforce with 17 lifecycle hooks. Three scopes (glob
Cybersec Audit Skill
Claude Agent skill for hybrid code security auditing — deterministic + LLM analysis with auto-fix
Vibe Security Check Skill
Claude skill for automated security audit for vibe-coded apps. One command, 15 checks, auto-fix. Works with No
Related Agents
Security Fixer
Implement the minimal fix for a confirmed security finding with a working PoC. Creates a branch, edits source
Security Implementor
Java/Spring Boot security fix implementor. Consumes a security audit report's HANDOFF BLOCK and applies every
Sentinel Iac
IaC ファイル (Dockerfile / docker-compose / Terraform / GitHub Actions) の危険設定を検出し、Finding スキーマの JSON を返す読み取り専用エージェ