fix

Solid

Concrete remediation proposal with Safe Harbour confidence — version bump, inline as first-party code, patch, workaround, or advisory. Use when applying a fix for a triaged CVE, evaluating fix-type trade-offs across registry / source / distro patches, producing rollback-safe manifest edits with dry-run verification, or generating a CycloneDX SBOM after the fix lands.

Code & Development 9 stars 1 forks Updated 4 days ago Apache-2.0

Install

View on GitHub

Quality Score: 85/100

Stars 20%
33
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
80
License 10%
100
Description 5%
100

Skill Content

# Vulnetix Fix Intelligence Skill ## Use when - You have a triaged CVE and want a concrete remediation proposal — not just "upgrade". - A version bump conflicts with peer-deps and you need to evaluate inline-as-first-party-code (Type A0) or patch (Type B). - You need to apply the fix, regenerate the lockfile, run a dry-run scan, and produce a CycloneDX SBOM in one workflow. - Generating rollback-safe manifest edits with `.vulnetix-backup` so you can revert. - Cross-checking registry fixes vs. distro patches vs. upstream source PRs. ## Don't use for - Just understanding the CVE — use `/vulnetix:vuln` or `/vulnetix:exploits`. - Verifying the fix landed — use `/vulnetix:verify-fix`. - Resolving a peer-dep conflict that blocks the fix — use `/vulnetix:dep-resolve`. - Building a multi-CVE upgrade plan — use the `@dep-upgrade-orchestrator` agent. ## Conventions This skill follows [`_lib/contract.md`](../_lib/contract.md): the Vulnetix CLI is auto-installed by hooks, `.vulnetix/capabilities.yaml` is always present, every `vulnetix vdb` call is piped through a verified `jq` filter from [`_lib/jq/`](../_lib/jq/), independent calls run in parallel as concurrent Bash tool calls, and trailing follow-ups are limited to one line. See the contract for output style, memory write rules, and cooldowns. This skill fetches fix intelligence for a vulnerability and proposes concrete, actionable remediation steps for the current repository. ## Output & Analysis Guidelines **Primary output...

Details

Author
Vulnetix
Repository
Vulnetix/pix-ai-coding-assistant
Created
4 months ago
Last Updated
4 days ago
Language
Shell
License
Apache-2.0

Similar Skills

Semantically similar based on skill content — not just same category