Stats
Actions
Tags
From soundcheck
Applies fixes for security findings produced by /security-review. Use after detecting vulnerabilities to remediate them using language-idiomatic safe APIs.
How this skill is triggered — by the user, by Claude, or both
Slash command
/soundcheck:security-cleanupThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Applies fixes for security findings. Pair with `/security-review` to
Applies fixes for security findings. Pair with /security-review to
detect issues, then /security-cleanup to fix them.
This skill remediates, not detects. Run /security-review first.
Get the findings: from the user's message, a recent /security-review
output, or — if none are available — run /security-review first to
produce them.
For each finding (highest severity first):
.claude/skills/<skill>/SKILL.md for the correct fix patternhtml/template, Python
Environment(autoescape=True), Java PreparedStatement, etc.)After all findings are processed, summarize what was fixed.
Rules:
npx claudepluginhub thejefflarson/soundcheck --plugin soundcheckGenerates targeted security fixes with regression tests from detect-dev SARIF findings. Use when remediating vulnerabilities after a security audit.
Reviews security fixes and patches for completeness and correctness. Useful for verifying vulnerability remediations after audits or scans.
Applies a deterministic remediation patch for a specific security scanner finding via MCP toolchain (synthesize→verify→apply). Handles single-finding and batch fixes with HMAC-verified writes and project test verification.