Fix Review

1---
2name: fix-review
3description: "Verify fix commits address audit findings without new bugs"
4source: "https://github.com/trailofbits/skills/tree/main/plugins/fix-review"
5risk: safe
6---
7 
8# Fix Review
9 
10## Overview
11 
12Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities.
13 
14## When to Use This Skill
15 
16Use this skill when you need to verify fix commits address audit findings without new bugs.
17 
18Use this skill when:
19- Reviewing commits that address security audit findings
20- Verifying that fixes don't introduce new vulnerabilities
21- Ensuring code changes properly resolve identified issues
22- Validating that remediation efforts are complete and correct
23 
24## Instructions
25 
26This skill helps verify that fix commits properly address audit findings:
27 
281. **Review Fix Commits**: Analyze commits that claim to fix audit findings
292. **Verify Resolution**: Ensure the original issue is properly addressed
303. **Check for Regressions**: Verify no new bugs or vulnerabilities are introduced
314. **Validate Completeness**: Ensure all aspects of the finding are resolved
32 
33## Review Process
34 
35When reviewing fix commits:
36 
371. Compare the fix against the original audit finding
382. Verify the fix addresses the root cause, not just symptoms
393. Check for potential side effects or new issues
404. Validate that tests cover the fixed scenario
415. Ensure no similar vulnerabilities exist elsewhere
42 
43## Best Practices
44 
45- Review fixes in context of the full codebase
46- Verify test coverage for the fixed issue
47- Check for similar patterns that might need fixing
48- Ensure fixes follow security best practices
49- Document the resolution approach
50 
51## Resources
52 
53For more information, see the [source repository](https://github.com/trailofbits/skills/tree/main/plugins/fix-review).
54