remediation-library
Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.
What this skill does
# Remediation Library This skill is an index to modular remediation guides. Use the specialized skills below for focused remediation guidance. ## When to Use This Skill - **Finding the right remediation skill** - Use this index to route to the appropriate specialized skill - **Overview of available fixes** - Quick reference of what's available ## When NOT to Use This Skill - **Detecting vulnerabilities** - Use vulnerability-patterns skill - **Specific remediation** - Use the specialized skills directly (faster) --- ## Specialized Remediation Skills ### `remediation-injection` **Covers**: SQL Injection, Command Injection, XSS **CWEs**: CWE-89, CWE-78, CWE-79 **Use when**: Fixing injection vulnerabilities, code review feedback ### `remediation-crypto` **Covers**: Weak Cryptography, Insecure Randomness, TLS Issues **CWEs**: CWE-327, CWE-330, CWE-295 **Use when**: Fixing crypto vulnerabilities, upgrading algorithms ### `remediation-auth` **Covers**: Hardcoded Credentials, JWT Security, Deserialization, Access Control **CWEs**: CWE-798, CWE-347, CWE-502, CWE-862 **Use when**: Fixing auth issues, secrets management, authorization ### `remediation-config` **Covers**: Path Traversal, Debug Mode, Security Headers **CWEs**: CWE-22, CWE-489, CWE-693 **Use when**: Fixing deployment issues, hardening configuration --- ## Quick Routing Guide | Vulnerability Type | Skill to Use | |-------------------|--------------| | SQL Injection | `remediation-injection` | | Command Injection | `remediation-injection` | | XSS | `remediation-injection` | | Weak hashing (MD5/SHA1) | `remediation-crypto` | | Insecure randomness | `remediation-crypto` | | TLS disabled | `remediation-crypto` | | Hardcoded secrets | `remediation-auth` | | JWT issues | `remediation-auth` | | Unsafe deserialization | `remediation-auth` | | Missing access control | `remediation-auth` | | Path traversal | `remediation-config` | | Debug in production | `remediation-config` | | Missing headers | `remediation-config` | --- ## OWASP Mapping | OWASP 2021 | Primary Skill | |------------|---------------| | A01 Broken Access Control | `remediation-auth` | | A02 Cryptographic Failures | `remediation-crypto` | | A03 Injection | `remediation-injection` | | A04 Insecure Design | Multiple | | A05 Security Misconfiguration | `remediation-config` | | A06 Vulnerable Components | N/A | | A07 Auth Failures | `remediation-auth` | | A08 Data Integrity Failures | `remediation-auth` | | A09 Logging Failures | `remediation-config` | | A10 SSRF | `remediation-injection` | --- ## See Also - `vulnerability-patterns` - Detection patterns - `asvs-requirements` - ASVS compliance mapping - `audit-report` - Report formatting
Related in Security
mac-ops
IncludedComprehensive macOS workstation operations — diagnose kernel panics, identify failing drives, audit launchd startup items, decode wake reasons, triage TCC permission denials, manage APFS snapshots, recover from no-boot. Use for: Mac is slow, slow bootup, won't boot, kernel panic, kernel_task hot, mds_stores CPU, photoanalysisd, cloudd, login loop, gray screen, sleep wake failure, drive failing, IO errors, APFS snapshots eating space, Time Machine local snapshots, Spotlight indexing, launchd, LaunchAgent, LaunchDaemon, login items, TCC permissions, Full Disk Access, Screen Recording denied, Gatekeeper, quarantine, com.apple.quarantine, app is damaged, helper tool, /Library/PrivilegedHelperTools, pmset, wake reasons, dark wake, sysdiagnose, panic.ips, DiagnosticReports, configuration profile, MDM profile, remote diagnostics over SSH.
a11y-audit
IncludedRun accessibility audits on web projects combining automated scanning (axe-core, Lighthouse) with WCAG 2.1 AA compliance mapping, manual check guidance, and structured reporting. Output is configurable: markdown report only, markdown plus machine-readable JSON, or markdown plus issue tracker integration. Use this skill whenever the user mentions "accessibility audit", "a11y audit", "WCAG audit", "accessibility check", "compliance scan", or asks to check a web project for accessibility issues. Also trigger when the user wants to verify WCAG conformance or map findings to a specific standard (CAN-ASC-6.2, EN 301 549, ADA/AODA).
erpclaw
IncludedAI-native ERP system with self-extending OS. Full accounting, invoicing, inventory, purchasing, tax, billing, HR, payroll, advanced accounting (ASC 606/842, intercompany, consolidation), and financial reporting. 413 actions across 14 domains, 43 expansion modules. Constitutional guardrails, adversarial audit, schema migration. Double-entry GL, immutable audit trail, US GAAP.
assess
IncludedAssesses and rates quality 0-10 across multiple dimensions (correctness, maintainability, security, performance, testability, simplicity) with pros/cons analysis. Compares against project conventions and prior decisions from memory. Produces structured evaluation reports with actionable improvement suggestions. Use when evaluating code, designs, architectures, or comparing alternative approaches.
spring-boot-security-jwt
IncludedProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
code-hardcode-audit
IncludedDetect hardcoded values, magic numbers, and leaked secrets. TRIGGERS - hardcode audit, magic numbers, PLR2004, secret scanning.