Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.
This skill inherits all available tools. When active, it can use any tool Claude has access to.
This skill is an index to modular remediation guides. Use the specialized skills below for focused remediation guidance.
remediation-injectionCovers: SQL Injection, Command Injection, XSS CWEs: CWE-89, CWE-78, CWE-79 Use when: Fixing injection vulnerabilities, code review feedback
remediation-cryptoCovers: Weak Cryptography, Insecure Randomness, TLS Issues CWEs: CWE-327, CWE-330, CWE-295 Use when: Fixing crypto vulnerabilities, upgrading algorithms
remediation-authCovers: Hardcoded Credentials, JWT Security, Deserialization, Access Control CWEs: CWE-798, CWE-347, CWE-502, CWE-862 Use when: Fixing auth issues, secrets management, authorization
remediation-configCovers: Path Traversal, Debug Mode, Security Headers CWEs: CWE-22, CWE-489, CWE-693 Use when: Fixing deployment issues, hardening configuration
| Vulnerability Type | Skill to Use |
|---|---|
| SQL Injection | remediation-injection |
| Command Injection | remediation-injection |
| XSS | remediation-injection |
| Weak hashing (MD5/SHA1) | remediation-crypto |
| Insecure randomness | remediation-crypto |
| TLS disabled | remediation-crypto |
| Hardcoded secrets | remediation-auth |
| JWT issues | remediation-auth |
| Unsafe deserialization | remediation-auth |
| Missing access control | remediation-auth |
| Path traversal | remediation-config |
| Debug in production | remediation-config |
| Missing headers | remediation-config |
| OWASP 2021 | Primary Skill |
|---|---|
| A01 Broken Access Control | remediation-auth |
| A02 Cryptographic Failures | remediation-crypto |
| A03 Injection | remediation-injection |
| A04 Insecure Design | Multiple |
| A05 Security Misconfiguration | remediation-config |
| A06 Vulnerable Components | N/A |
| A07 Auth Failures | remediation-auth |
| A08 Data Integrity Failures | remediation-auth |
| A09 Logging Failures | remediation-config |
| A10 SSRF | remediation-injection |
vulnerability-patterns - Detection patternsasvs-requirements - ASVS compliance mappingaudit-report - Report formatting