uttej-badwane

Fix Finding — Security skill for Claude Code

Security community

Auto-fix a specific security finding by editing the IaC file directly.

How to install Fix Finding

Installs to ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-fix-finding/SKILL.md

Terminal
mkdir -p ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-fix-finding && curl -fsSL https://raw.githubusercontent.com/uttej-badwane/secure-cloud-prompt-engineering/HEAD/commands/fix-finding.md -o ~/.claude/skills/uttej-badwane-secure-cloud-prompt-engineering-fix-finding/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Fix Finding does


name: fix-finding description: Auto-fix a specific security finding by editing the IaC file directly

Apply a targeted fix to a specific security finding identified in a prior review.

Steps

  1. Parse the argument — accept either:

    • A finding number from the most recent report (e.g., /fix-finding 3)
    • A description of what to fix (e.g., /fix-finding "s3 public access" terraform/main.tf)
  2. Read the relevant file(s) to understand current state.

  3. Apply the minimal, correct

Alternatives in Security

  • Security Best Practices — Review code for language-specific security vulnerabilities 14.6k ★
  • Deepsec — Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents 7.8k ★
  • Design Compliance — Audit or generate regulation-specific UI patterns for HIPAA, PCI DSS, or ADA compliance 309 ★

Full documentation available on GitHub

View Source Repository