Verify Code Fixes Address Audit Findings

This skill verifies that fix commits properly address audit findings without introducing new bugs or security vulnerabilities.

Its instructions: review fix commits that claim to resolve audit findings; verify the original issue is properly resolved; check for regressions (new bugs or vulnerabilities introduced by the fix); and validate completeness (all aspects of the finding are addressed, not just part of it). Its review process: compare the fix against the original audit finding; verify the fix addresses the root cause rather than just symptoms; check for potential side effects or new issues; validate that tests cover the fixed scenario; and ensure no similar vulnerabilities exist elsewhere in the codebase.

Its best practices: review fixes in the context of the full codebase, verify test coverage for the fixed issue, check for similar patterns that might need the same fix, ensure fixes follow security best practices, and document the resolution approach.

Use this skill when reviewing commits that address security audit findings, verifying that fixes don't introduce new vulnerabilities, ensuring code changes properly resolve identified issues, or validating that remediation efforts are complete and correct.

Inputs: a fix commit and the original audit finding it claims to address.

Outputs: a verification of whether the fix resolves the root cause, introduces no regressions, has adequate test coverage, and whether similar vulnerabilities exist elsewhere that also need fixing.

None specified beyond the codebase and its commit/audit history.

Security reviewers and engineers verifying that fix commits genuinely resolve audit findings without introducing new bugs or vulnerabilities.