Remediation Library

This skill is an index to modular remediation guides. Use the specialized skills below for focused remediation guidance.

When to Use This Skill

Finding the right remediation skill - Use this index to route to the appropriate specialized skill
Overview of available fixes - Quick reference of what's available

When NOT to Use This Skill

Detecting vulnerabilities - Use vulnerability-patterns skill
Specific remediation - Use the specialized skills directly (faster)

Specialized Remediation Skills

`remediation-injection`

Covers: SQL Injection, Command Injection, XSS CWEs: CWE-89, CWE-78, CWE-79 Use when: Fixing injection vulnerabilities, code review feedback

`remediation-crypto`

Covers: Weak Cryptography, Insecure Randomness, TLS Issues CWEs: CWE-327, CWE-330, CWE-295 Use when: Fixing crypto vulnerabilities, upgrading algorithms

`remediation-auth`

Covers: Hardcoded Credentials, JWT Security, Deserialization, Access Control CWEs: CWE-798, CWE-347, CWE-502, CWE-862 Use when: Fixing auth issues, secrets management, authorization

`remediation-config`

Covers: Path Traversal, Debug Mode, Security Headers CWEs: CWE-22, CWE-489, CWE-693 Use when: Fixing deployment issues, hardening configuration

Quick Routing Guide

Vulnerability Type	Skill to Use
SQL Injection	`remediation-injection`
Command Injection	`remediation-injection`
XSS	`remediation-injection`
Weak hashing (MD5/SHA1)	`remediation-crypto`
Insecure randomness	`remediation-crypto`
TLS disabled	`remediation-crypto`
Hardcoded secrets	`remediation-auth`
JWT issues	`remediation-auth`
Unsafe deserialization	`remediation-auth`
Missing access control	`remediation-auth`
Path traversal	`remediation-config`
Debug in production	`remediation-config`
Missing headers	`remediation-config`

OWASP Mapping

OWASP 2021	Primary Skill
A01 Broken Access Control	`remediation-auth`
A02 Cryptographic Failures	`remediation-crypto`
A03 Injection	`remediation-injection`
A04 Insecure Design	Multiple
A05 Security Misconfiguration	`remediation-config`
A06 Vulnerable Components	N/A
A07 Auth Failures	`remediation-auth`
A08 Data Integrity Failures	`remediation-auth`
A09 Logging Failures	`remediation-config`
A10 SSRF	`remediation-injection`

remediation-library