| name | secure-patch-suggestion |
| description | Use when you need targeted security patch suggestions or controlled patch application from confirmed findings, including minimal diffs, validation checks, and rollback notes. |
| argument-hint | Provide finding IDs and files to patch and say suggestion mode or apply mode |
| user-invocable | true |
Secure Patch Suggestion Skill
When to use
Use after findings are confirmed.
Modes:
- Suggestion mode: produce diffs/snippets only.
- Apply mode: make reversible runtime edits when explicitly requested.
Inputs
- Confirmed finding IDs
- Target files
- Constraints (minimal edits, no behavior change where possible)
Procedure
- Restate the risk and objective.
- Propose the smallest viable code change.
- In suggestion mode, provide diff-style patch suggestion.
- In apply mode, apply minimal edits and record changed files.
- Explain side effects and compatibility concerns.
- Provide validation and rollback checklist.
Patch quality rules
- Keep each patch scoped to one risk.
- Avoid unrelated refactors.
- Note if additional tests are required.
- In apply mode, include explicit rollback commands.
Output sections
- Objective
- Suggested or applied patch
- Validation checklist
- Residual risk
- Rollback plan