external-plugin-marketplace

Trigger when user wants to remediate DryRun Deepscan findings or merged pull request findings. Activates when the user asks to fix findings from a deepscan or from a pull request that has already been scanned, and wants to open a fresh PR with the fixes. Covers both code vulnerabilities (deepscan + PR) and SCA advisory findings (deepscan only). Use when the user mentions remediation, fixing, or addressing DryRunSecurity findings, deepscan findings, SCA findings, or PR scan results.

Use when the user asks to create a pull request or merge request, submit changes for review, push for review, or open a pull request.

Helps fix security vulnerabilities identified by DryRunSecurity. Activates when the user shares a DryRunSecurity comment (from a GitHub PR or GitLab MR) or asks for help fixing any security finding including SQL injection, XSS, CSRF, SSRF, path traversal, command injection, authentication bypass, authorization flaws, and prompt injection. Researches authoritative sources and applies fixes grounded in the user's specific codebase context.