← All skills
fix
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By davepoon/buildwithclaude (GitHub) · coding · 3,737 stars · scanned at commit b8e39b9
Get fix intelligence for a vulnerability and propose concrete remediation for the current repository
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 21 places.
Show 17 more
- plugins/vulnetix/skills/fix/SKILL.md, line 309
gh auth status 2>/dev/null - plugins/vulnetix/skills/fix/SKILL.md, line 318
gh api repos/{owner}/{repo}/dependabot/alerts --jq '[.[] | select(.security_advisory.cve_id == "'"$ARGUMENTS"'" or (.security_advisory.ghsa_id == "'"$ARGUMENTS" - plugins/vulnetix/skills/fix/SKILL.md, line 329
gh pr list --author "app/dependabot" --state all --json number,title,state,url,comments --limit 50 | jq '[.[] | select(.title | test("'"$PACKAGE_NAME"'"; "i"))] - plugins/vulnetix/skills/fix/SKILL.md, line 381
gh api repos/{owner}/{repo}/code-scanning/alerts?state=open --jq '[.[] | select(.rule.tags[]? | test("cwe-"; "i"))]' - plugins/vulnetix/skills/fix/SKILL.md, line 396
gh api repos/{owner}/{repo}/code-scanning/default-setup --jq '{state, languages, query_suite}' - plugins/vulnetix/skills/fix/SKILL.md, line 425
gh api repos/{owner}/{repo}/code-scanning/alerts/{alert_number}/autofix --jq '{status}' - plugins/vulnetix/skills/fix/SKILL.md, line 448
gh api repos/{owner}/{repo}/secret-scanning/alerts?state=open - plugins/vulnetix/skills/fix/SKILL.md, line 544
gh api repos/{owner}/{repo}/code-scanning/alerts --jq '[.[] | select(.rule.tags[]? | test("CWE-<NUMBER>"; "i"))]' - plugins/vulnetix/skills/fix/SKILL.md, line 552
gh api repos/{owner}/{repo}/code-scanning/default-setup --jq '.state' - plugins/vulnetix/skills/fix/SKILL.md, line 565
gh api repos/{owner}/{repo}/secret-scanning/alerts?state=open - plugins/vulnetix/skills/fix/SKILL.md, line 573
gh api repos/{owner}/{repo}/secret-scanning/alerts?state=resolved --jq '[.[] | select(.resolution != null)]' - plugins/vulnetix/skills/fix/SKILL.md, line 583
vulnetix vdb fixes "$ARGUMENTS" -o json - plugins/vulnetix/skills/fix/SKILL.md, line 636
vulnetix vdb vuln "$ARGUMENTS" -o json - plugins/vulnetix/skills/fix/SKILL.md, line 799
cp package-lock.json package-lock.json.vulnetix-backup 2>/dev/null - plugins/vulnetix/skills/fix/SKILL.md, line 865
npm install --dry-run - plugins/vulnetix/skills/fix/SKILL.md, line 901
mv package-lock.json.vulnetix-backup package-lock.json 2>/dev/null - plugins/vulnetix/skills/fix/SKILL.md, line 913
npm test # npm
and 1 more places
Downloads and installs other software
The author does not mention this.
Found in 2 places.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'fix' ] || [ -L ~/.agents/skills/'fix' ]; then echo 'A skill folder named fix already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/davepoon/buildwithclaude' "$d" && git -C "$d" checkout --quiet 'b8e39b909f5e248090b16b2fd62048ba0ac6a70e' -- 'plugins/vulnetix/skills/fix' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/vulnetix/skills/fix' ~/.agents/skills/'fix' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'fix' ~/.claude/skills/'fix' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for davepoon/buildwithclaude shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/davepoon/buildwithclaude/)
Score history
| Date | Version | Score |
|---|
| 2026-11-10 | b8e39b9 | 80 |
| 2026-11-08 | d75a800 | 80 |
| 2026-11-07 | 6e596ad | 80 |