fix-review

SKILL.md

Differential analysis to verify commits address security findings without introducing bugs.

| Rationalization | Why It's Wrong | Required Action |

| "The commit message says it fixes TOB-XXX" | Messages lie; code tells truth | Verify the actual code change addresses the finding | | "Small fix, no new bugs possible" | Small changes cause big bugs | Analyze all changes for anti-patterns | | "I'll check the important findings" | All findings matter | Systematically check every finding |

驗證 git 提交是否解決了安全審計結果而不會引入錯誤。當用戶要求“驗證這些提交修復審計結果”、“檢查 TOB-XXX 是否已解決”、“查看修復分支”、“驗證修復提交”、“這些更改是否解決了安全報告”、“審計後修復審查”、“將修復提交與審計報告進行比較”時，或者根據安全審計報告檢查提交時，應使用此技能。 來源：trailofbits/skills。

查看原文