remediation-validation SKILL.md skillA

remediation-validation from coveros/strategiesfortestingai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add coveros/strategiesfortestingai/remediation-validation@git:20260424.a607dbd

Pins git:20260424.a607dbd in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
coveros/strategiesfortestingai
Path
.github/skills/remediation-validation/SKILL.md
Versions recorded
1
Latest version
git:20260424.a607dbd, committed Apr 24, 2026
Size
1,013 bytes
Repository stars
14
License
none declared

Use when you need to verify whether proposed or applied security remediations satisfy baseline controls and to report residual risk.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Remediation Validation Skill

## When to use

Use after patch suggestions are drafted or after fixes are applied.

## Inputs

- Findings and mapped control IDs
- Patched files or patch proposals
- Acceptance threshold (for example, no High findings open)

## Procedure

1. Re-check each finding against mapped controls.
2. Confirm whether control intent is met.
3. Identify regressions or unresolved edge cases.
4. Classify each finding status: resolved, partially_resolved, unresolved.
5. Produce a residual risk summary.

## Output schema

- `finding_id`
- `control_ids`
- `validation_status`
- `evidence`
- `next_action`

## Decision rule

Recommend "ready" only if no Critical or High findings remain unresolved.

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add coveros/strategiesfortestingai/remediation-validation@sha256:ff5687faa6681d99

The line at the top of this page pins the label git:20260424.a607dbd, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_y5zhsfacowws3jfm.svg)](https://markdownregistry.com/a/art_y5zhsfacowws3jfm)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Apr 24, 2026.

versioncommittedcommitsizeaudit
git:20260424.a607dbd latest2026-04-24 a607dbd 1,013 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (1013 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

coveros/strategiesfortestingai · 14 stars · license none declared · pushed 2026-09-20 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_y5zhsfacowws3jfm
GET https://markdownregistry.com/api/v1/resolve?ref=coveros/strategiesfortestingai/remediation-validation
GET https://markdownregistry.com/api/v1/blob/ff5687faa6681d99401be978c9c89d8b8b6a0406ca432828404c84dd0e80f028

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from coveros/strategiesfortestingai

runtime-remediation SKILL.md skill
coveros/strategiesfortestingai · .github/skills/runtime-remediation/SKILL.md · Use when you want live, controlled code edits during an AppSec demo: apply minimal hardening changes, validate…
git:20260424.a607dbd · audit A · 14 stars
secure-patch-suggestion SKILL.md skill
coveros/strategiesfortestingai · .github/skills/secure-patch-suggestion/SKILL.md · Use when you need targeted security patch suggestions or controlled patch application from confirmed findings…
git:20260424.a607dbd · audit A · 14 stars
vulnerability-discovery SKILL.md skill
coveros/strategiesfortestingai · .github/skills/vulnerability-discovery/SKILL.md · Use when you need a repeatable workflow to discover and document likely application security vulnerabilities with…
git:20260424.a607dbd · audit A · 14 stars

Every file in coveros/strategiesfortestingai

Browse by kind, by grade A, or by owner.