magpie-audit-finding-fix
SolidFor a batch of findings from a non-security audit tool (`<audit-tool>` — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer / equivalent; full list in the body) against `<upstream>`, draft the smallest fix for each finding. Re-runs the tool after each batch to confirm the findings are cleared. Produces a commit and a hand-back artefact; never opens a PR on autopilot or merges.
Install
Quality Score: 84/100
Skill Content
Details
- Author
- apache
- Repository
- apache/magpie
- Created
- 3 months ago
- Last Updated
- yesterday
- Language
- Python
- License
- Apache-2.0
Bundled in these plugins
Similar Skills
Semantically similar based on skill content — not just same category
magpie-issue-fix-workflow
For a single triaged `<issue-tracker>` issue confirmed as a bug or feature, draft a fix against `<upstream>` on `<default-branch>`. Produces the failing test, the smallest production change, the targeted+module test runs, and the commit. The PR is NOT opened on autopilot; the human committer reviews, signs, and pushes. Hand-back artefact summarises branch, commits, test results, and scope.
craft-fix
The Craftsman standard for driving fixes against an existing `craft-audit` workspace — "fix the findings", "fix SEC-003", "fix the security findings", "work through the audit", "start the climb". This is an ACTION skill, not a domain: it picks findings off the master tracker's climb sequence, re-verifies each one is still real, gets the user's approval, and executes a batched fix with a regression test — it never re-audits or re-ranks. REQUIRES an existing `.craftsman/` workspace at the project root to fire. Without one: a scoped fix request naming no audit ("fix this bug", "harden this endpoint") goes to the relevant domain craft skill directly (e.g. `craft-security`, `craft-backend`); a whole-project assessment request ("is my app production-ready", "what should I fix before I ship") goes to `craft-audit` first, since there's nothing to fix from without an audit. Trigger even when the user names no finding ID — "start the climb" or "work through the audit" with no argument means the top 5 open items from th
fix
Apply targeted fixes for specific findings from code reviews, security reviews, QA reports, or audit scans.