Remediation Library
This skill is an index to modular remediation guides. Use the specialized skills below for focused remediation guidance.
When to Use This Skill
- Finding the right remediation skill - Use this index to route to the appropriate specialized skill
- Overview of available fixes - Quick reference of what's available
When NOT to Use This Skill
- Detecting vulnerabilities - Use vulnerability-patterns skill
- Specific remediation - Use the specialized skills directly (faster)
Specialized Remediation Skills
remediation-injection
Covers: SQL Injection, Command Injection, XSS
CWEs: CWE-89, CWE-78, CWE-79
Use when: Fixing injection vulnerabilities, code review feedback
remediation-crypto
Covers: Weak Cryptography, Insecure Randomness, TLS Issues
CWEs: CWE-327, CWE-330, CWE-295
Use when: Fixing crypto vulnerabilities, upgrading algorithms
remediation-auth
Covers: Hardcoded Credentials, JWT Security, Deserialization, Access Control
CWEs: CWE-798, CWE-347, CWE-502, CWE-862
Use when: Fixing auth issues, secrets management, authorization
remediation-config
Covers: Path Traversal, Debug Mode, Security Headers
CWEs: CWE-22, CWE-489, CWE-693
Use when: Fixing deployment issues, hardening configuration
Quick Routing Guide
| Vulnerability Type |
Skill to Use |
| SQL Injection |
remediation-injection |
| Command Injection |
remediation-injection |
| XSS |
remediation-injection |
| Weak hashing (MD5/SHA1) |
remediation-crypto |
| Insecure randomness |
remediation-crypto |
| TLS disabled |
remediation-crypto |
| Hardcoded secrets |
remediation-auth |
| JWT issues |
remediation-auth |
| Unsafe deserialization |
remediation-auth |
| Missing access control |
remediation-auth |
| Path traversal |
remediation-config |
| Debug in production |
remediation-config |
| Missing headers |
remediation-config |
OWASP Mapping
| OWASP 2021 |
Primary Skill |
| A01 Broken Access Control |
remediation-auth |
| A02 Cryptographic Failures |
remediation-crypto |
| A03 Injection |
remediation-injection |
| A04 Insecure Design |
Multiple |
| A05 Security Misconfiguration |
remediation-config |
| A06 Vulnerable Components |
N/A |
| A07 Auth Failures |
remediation-auth |
| A08 Data Integrity Failures |
remediation-auth |
| A09 Logging Failures |
remediation-config |
| A10 SSRF |
remediation-injection |
See Also
vulnerability-patterns - Detection patternsasvs-requirements - ASVS compliance mappingaudit-report - Report formatting
