security-remediation

name	security-remediation
description	Address security findings with targeted fixes. Triggers when @security reports a blocker finding.
owner	any
trigger	security_finding
version	1

Security Remediation

When a security finding is reported, apply targeted fixes.

Workflow

1. Read the security finding details (severity, location, description)
2. Classify the vulnerability type (XSS, injection, auth bypass, etc.)
3. Apply the minimal fix:
   • Input validation/sanitization for injection
   • Output encoding for XSS
   • Authentication/authorization checks for access control
   • Secrets rotation for exposed credentials
4. Verify the fix doesn't break existing functionality
5. Add a test that would catch the vulnerability if it regressed