threat-patch

Installation
SKILL.md

Threat Patch

Reads security findings and produces minimal, surgical code patches with structured documentation. Fixes are code-grounded — each patch targets specific files and functions identified in the finding. Output includes a summary, validation steps, and the code changes.

When to Apply

  • User provides a findings.json (from threat-model) and wants fixes
  • User provides a Codex security findings CSV and wants fixes
  • User has a THREAT-MODEL.md and wants to remediate identified risks
  • User describes a specific vulnerability and wants a patch
  • Reviewing security scanner output and needs actionable fixes
  • After a security audit, turning findings into code changes

Input Sources (priority order)

Source What It Provides How to Use
findings.json (from threat-model) Structured findings with data flow traces, systemic groupings, exploit chains, and severity ratings Read directly — richest input, already triaged and grouped
Codex CSV Title, description, severity, relevant_paths per finding Run scripts/parse-findings.sh <csv-path> to extract structured output
Related skills

More from pproenca/dot-skills

Installs
94
GitHub Stars
141
First Seen
Mar 29, 2026