fix
SolidConcrete remediation proposal with Safe Harbour confidence — version bump, inline as first-party code, patch, workaround, or advisory. Use when applying a fix for a triaged CVE, evaluating fix-type trade-offs across registry / source / distro patches, producing rollback-safe manifest edits with dry-run verification, or generating a CycloneDX SBOM after the fix lands.
Install
Quality Score: 85/100
Skill Content
Details
- Author
- Vulnetix
- Repository
- Vulnetix/pix-ai-coding-assistant
- Created
- 4 months ago
- Last Updated
- 4 days ago
- Language
- Shell
- License
- Apache-2.0
Similar Skills
Semantically similar based on skill content — not just same category
remediation
Context-aware remediation plan (V2 endpoint) — registry fixes ranked by confidence, upstream commits, distribution patches, workarounds with effectiveness scores, CWE-specific defensive strategies, and per-package-manager verification commands. Use when you need a structured remediation playbook (not just a single fix), CWE guidance for related vulnerabilities, or per-ecosystem verify commands.
verify-fix
Post-fix verification — re-scan the repo, gate on `--exploits weaponized --severity high`, recheck the specific CVE against the new installed version, write the verdict to `.vulnetix/memory.yaml`. Use when confirming a fix landed, validating a version bump did not introduce regressions, or producing a clean-scan attestation for compliance.
dep-resolve
Dependency-conflict resolution when a `/vulnetix:fix` version bump fails — diagnose the peer-dep tree, find a compatible safe version set, propose package-manager overrides (`overrides`/`resolutions`/`replace`/`[patch]`), fall back to safe-harbour inline patching. Use when an upgrade is blocked by transitive constraints, a peer-dep conflict surfaces, or you need to override a vulnerable transitive without bumping the parent.