skills

Request or fetch Qwiet recommended fixes and branch autofixes. Invoke when the user runs /autofix-vuln or asks for autofix, recommended fix, or remediation after triage. Do NOT satisfy autofix by calling sl_get_recommended_fix* without this skill active; run /autofix-vuln first.

Run code analysis via sl analyze or look up package CVEs (Intelligent SCA) via Qwiet. Invoke when the user runs /run-security-scan or asks to scan code or run sl analyze. Do NOT use for triage or autofix — those require /triage-vuln and /autofix-vuln.

Install and verify the harness-code-security-mcp npm MCP server. Use when sl_* MCP tools are missing, setup is requested, or Qwiet auth needs diagnosis.

List and explain findings from a scan with data flow. Invoke when the user runs /triage-vuln or says triage, review findings, or investigate finding ids after a scan. Do NOT satisfy triage by calling sl_* tools without this skill active; run /triage-vuln first.