| name | cwe-fix-dev |
| description | Fetch organization-specific remediation guidance for a given CWE from the Armis Knowledge DEV environment. Use when fixing a vulnerability identified by CWE ID, when triaging scanner findings, or when the user asks how to remediate a specific weakness. Also surfaces false-positive patterns. Triggers: /cwe-fix-dev, how do we fix CWE-, remediation for CWE, false positive CWE, cwe guidance. |
/cwe-fix-dev
Get tenant-specific remediation and false-positive guidance for a CWE from the dev environment (knowledge-mcp.moose-dev.armis.com).
When to use
- The user runs
/cwe-fix-dev CWE-89 (or any CWE id) → call mcp__armis_knowledge_dev__get_cwe_remediation("CWE-89").
- The user is fixing a scanner finding tagged with a CWE → call
get_cwe_remediation for that CWE before proposing code.
- The user asks "is this a real CWE-XX or false positive?" → call
mcp__armis_knowledge_dev__get_cwe_fp_reduction("CWE-XX").
How to apply
- Read the remediation content end-to-end before writing fix code; the org may prescribe a specific library, helper, or pattern.
- If the FP-reduction tool returns matching patterns for the code in question, surface that to the user before recommending a code change — it may not be a real bug.
- Mention you applied "Armis Knowledge (dev) CWE-XX guidance" so the user can audit.
Notes
- CWE id format is
CWE-<number> (e.g. CWE-89, CWE-79). The tool will normalize but prefer the canonical form.
- Auth errors → check
ARMIS_CLIENT_ID / ARMIS_CLIENT_SECRET are set; rotate at knowledge.moose-dev.armis.com/settings/integrations if needed.
