Vulnerability Remediation

高级security最低上下文：64K

Finds, validates, and fixes security vulnerabilities end to end, going beyond audit-only review to produce verified patches. Reproduces the issue, proposes a minimal fix, and confirms the vulnerability is closed without breaking existing behavior. Models a CodeMender-style workflow where multiple agents detect, validate, and patch code security issues at scale.

securityvulnerabilityremediationpatchingcode-securitycweautomation

使用场景

  • Auto-patching a confirmed injection or memory-safety vulnerability
  • Triaging a scanner report and producing verified fixes at scale
  • Backporting a security fix across multiple affected branches
  • Generating a regression test that proves the vulnerability is closed
  • Prioritizing fixes by exploitability and blast radius

示例提示词

A static analyzer flagged a potential SQL injection in the function below.

Do the following:
1. Confirm whether the vulnerability is real and describe an exploit path
2. Assign a severity and the relevant CWE identifier
3. Produce a minimal patch using parameterized queries
4. Add a regression test that fails on the vulnerable version and passes on the patch
5. Explain why the fix does not change legitimate behavior

Code:
```
[paste code here]
```

推荐模型

gemini-3-5-flash-cyberclaude-opus-4-7gpt-5-5-pro

兼容工具

claude-codecursorkiroany

模态

输入: code, text
→
输出: text, code

相关 Skills

security-auditthreat-modelingpenetration-test-planner

作者

OpenModels Community

@openmodelsrun