sec-audit-remediate
sec-audit-remediate
Generate targeted security fixes from detect-dev SARIF findings with regression tests.
Context Files
$JAAN_LEARN_DIR/jaan-to-sec-audit-remediate.learn.md- Past lessons (loaded in Pre-Execution)$JAAN_TEMPLATES_DIR/jaan-to-sec-audit-remediate.template.md- Output template$JAAN_CONTEXT_DIR/tech.md- Tech stack (optional, auto-imported if exists)- Uses sections:
#current-stack,#frameworks,#constraints,#patterns
- Uses sections:
${CLAUDE_PLUGIN_ROOT}/docs/extending/language-protocol.md- Language resolution protocol${CLAUDE_PLUGIN_ROOT}/docs/research/73-dev-sarif-security-remediation-automation.md- SARIF 2.1.0 parsing, CWE-to-fix mapping, remediation patterns${CLAUDE_PLUGIN_ROOT}/docs/research/72-dev-secure-backend-scaffold-hardening.md- jose JWT, httpOnly cookies, CSRF, rate limiting, OWASP Top 10
Output path: $JAAN_OUTPUTS_DIR/sec/remediate/{id}-{slug}/
DAG position: detect-dev + backend-scaffold + frontend-scaffold --> sec-audit-remediate --> devops-infra-scaffold (security in CI)
Input
More from parhumm/jaan-to
ux-microcopy-write
Generate multi-language microcopy packs for UI components with cultural adaptation. Use when writing UI text and translations.
11detect-product
Product reality extraction with evidence-backed features, monetization, and metrics. Use when analyzing product capabilities.
9release-iterate-changelog
Generate changelog with user impact notes and support guidance from git history. Use when preparing release notes.
9backend-scaffold
Generate production-ready backend code with routes, data models, service layers, and validation. Use when scaffolding backend from specs.
9detect-dev
Engineering audit with SARIF evidence, 4-level confidence, and OpenSSF scoring. Use when evaluating repository health or code quality.
8frontend-scaffold
Convert designs to React/Next.js components with TailwindCSS, TypeScript, and typed API hooks. Use when scaffolding frontend from designs.
8