Antigravity Skills - Build and Discover AI Agent SkillsAntigravity Skills

Fix Review Skill · Testing Security

Verify Security Fixes and Prevent Regressions with Fix Review

Verify fix commits address audit findings without new bugs.

Ensure 100% resolution of security vulnerabilities and prevent regressions with this AI agent tool.

  • Security Audit
  • Code Review
  • Vulnerability Fix
  • DevSecOps
  • Regression Testing

About This Skill

The Fix Review skill provides a structured framework for validating security patches. With 4 core instructions and 5 best practices, it ensures that audit findings are fully resolved without introducing new vulnerabilities into your codebase.

Quick Start

  1. 1Identify the security audit finding and the corresponding fix commit.
  2. 2Run the fix-review skill on the commit diff.
  3. 3Review the validation report for completeness and potential regressions.
Example Command
antigravity run fix-review --commit <hash> --finding <finding_id>

Core Capabilities

Review Fix Commits

Analyze commits that claim to fix audit findings to ensure they target the correct code paths.

Verify Resolution

Ensure the original issue is properly addressed at the root cause level, not just the symptoms.

Check for Regressions

Verify no new bugs or security vulnerabilities are introduced as a side effect of the fix.

Validate Completeness

Ensure all aspects of the finding are resolved across the entire codebase.

Usage Examples

Before

query = "SELECT * FROM users WHERE id = " + id

After

query = "SELECT * FROM users WHERE id = ?", [id]

Input

Verify if the fix for CVE-2023-1234 covers all edge cases.

Output

The fix addresses the main buffer overflow but lacks bounds checking for negative integers.

Input

Check if the recent security patch introduces side effects in the auth module.

Output

No side effects detected. The patch is isolated to the session timeout logic.

SKILL.md

---
name: fix-review
description: "Verify fix commits address audit findings without new bugs"
risk: safe
source: "https://github.com/trailofbits/skills/tree/main/plugins/fix-review"
date_added: "2026-02-27"
---

# Fix Review

## Overview

Verify that fix commits properly address audit findings without introducing new bugs or security vulnerabilities.

## When to Use This Skill

Use this skill when you need to verify fix commits address audit findings without new bugs.

Use this skill when:
- Reviewing commits that address security audit findings
- Verifying that fixes don't introduce new vulnerabilities
- Ensuring code changes properly resolve identified issues
- Validating that remediation efforts are complete and correct

## Instructions

This skill helps verify that fix commits properly address audit findings:

1. **Review Fix Commits**: Analyze commits that claim to fix audit findings
2. **Verify Resolution**: Ensure the original issue is properly addressed
3. **Check for Regressions**: Verify no new bugs or vulnerabilities are introduced
4. **Validate Completeness**: Ensure all aspects of the finding are resolved

## Review Process

When reviewing fix commits:

1. Compare the fix against the original audit finding
2. Verify the fix addresses the root cause, not just symptoms
3. Check for potential side effects or new issues
4. Validate that tests cover the fixed scenario
5. Ensure no similar vulnerabilities exist elsewhere

## Best Practices

- Review fixes in context of the full codebase
- Verify test coverage for the fixed issue
- Check for similar patterns that might need fixing
- Ensure fixes follow security best practices
- Document the resolution approach

## Resources

For more information, see the [source repository](https://github.com/trailofbits/skills/tree/main/plugins/fix-review).

## Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validati

Frequently Asked Questions

FAQ

Is this tool compatible with my existing CI/CD pipeline?
Yes, the fix-review skill is designed to integrate with standard git workflows and can be called via CLI in most CI environments.
Who is the target audience for this skill?
This skill is primarily for software developers, security engineers, and code reviewers responsible for remediating security audit findings.
How does this differ from standard static analysis tools?
Unlike generic linters, this skill specifically focuses on the context of an audit finding, ensuring the fix is relevant and complete rather than just checking for syntax.
What programming languages are supported?
The skill is language-agnostic as it analyzes logic and patterns, though it performs best with languages supported by the underlying LLM.
What results can I expect from using this skill?
You can expect a detailed validation report confirming if a fix is effective, identifying potential regressions, and suggesting improvements for completeness.

Discussion

Discussion

0 comments
U

On This Page

Trigger Phrases

Use these phrases to activate this skill in your AI coding assistant:

verify security fixreview audit remediationcheck for regressions in fixvalidate security patchanalyze fix commit