fix-security-hotfix
Handle security bugs — data exposure, auth or payment bypass, SSRF, XSS, CSRF, open redirects, secrets, missing rate limits — with contain-first steps, server-side fixes using shared guards, bypass-variant sweeps, exploitation log review, and minimal disclosure. Use for any P0/P1 security finding.
75
94%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Passed
No findings from the security scan
Security Fixes
Procedure
- Contain (P0): flag off, block the route, or require auth temporarily. Production containment needs fast approval with the exact change.
- Fix on the server with a shared guard:
safePath(redirects),parsePublicUrl+ DNS re-check at fetch time (SSRF), DOM text nodes and template escaping (XSS), CSRF tokens or SameSite, a rate limiter on public and AI-cost endpoints, secure cookie flags. - Sweep with
fix-class-sweep, including every bypass variant. - Check logs for past exploitation and report counts, not personal data.
- Secrets: request rotation; never paste values anywhere.
- Disclosure: keep exploit details out of tickets and chats.
- Ask for expedited verification; keep containment until VERIFIED and deployed.
Exit criteria
Containment recorded, the fix VERIFIED with bypass variants, log review summarized, and owner decisions requested.
Counterpart of tester skill: qa-security-web.
- Repository
itsablabla/qa-bug-agent-skills
- Revision
9a6f628
- Last updated
- First committed
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.