secure-patch-suggestion SKILL.md skillA

secure-patch-suggestion from coveros/strategiesfortestingai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add coveros/strategiesfortestingai/secure-patch-suggestion@git:20260424.a607dbd

Pins git:20260424.a607dbd in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
coveros/strategiesfortestingai
Path
.github/skills/secure-patch-suggestion/SKILL.md
Versions recorded
1
Latest version
git:20260424.a607dbd, committed Apr 24, 2026
Size
1,295 bytes
Repository stars
14
License
none declared

Use when you need targeted security patch suggestions or controlled patch application from confirmed findings, including minimal diffs, validation checks, and rollback notes.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Secure Patch Suggestion Skill

## When to use

Use after findings are confirmed.

Modes:

- Suggestion mode: produce diffs/snippets only.
- Apply mode: make reversible runtime edits when explicitly requested.

## Inputs

- Confirmed finding IDs
- Target files
- Constraints (minimal edits, no behavior change where possible)

## Procedure

1. Restate the risk and objective.
2. Propose the smallest viable code change.
3. In suggestion mode, provide diff-style patch suggestion.
4. In apply mode, apply minimal edits and record changed files.
5. Explain side effects and compatibility concerns.
6. Provide validation and rollback checklist.

## Patch quality rules

- Keep each patch scoped to one risk.
- Avoid unrelated refactors.
- Note if additional tests are required.
- In apply mode, include explicit rollback commands.

## Output sections

1. Objective
2. Suggested or applied patch
3. Validation checklist
4. Residual risk
5. Rollback plan

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add coveros/strategiesfortestingai/secure-patch-suggestion@sha256:fae6d682055664b2

The line at the top of this page pins the label git:20260424.a607dbd, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_yk5au3cwmpnr4vlu.svg)](https://markdownregistry.com/a/art_yk5au3cwmpnr4vlu)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Apr 24, 2026.

versioncommittedcommitsizeaudit
git:20260424.a607dbd latest2026-04-24 a607dbd 1,295 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (1295 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

coveros/strategiesfortestingai · 14 stars · license none declared · pushed 2026-09-20 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_yk5au3cwmpnr4vlu
GET https://markdownregistry.com/api/v1/resolve?ref=coveros/strategiesfortestingai/secure-patch-suggestion
GET https://markdownregistry.com/api/v1/blob/fae6d682055664b2a58c9c4eac3d1e69aaf7e12feb5304a5e317fee067e56b03

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from coveros/strategiesfortestingai

remediation-validation SKILL.md skill
coveros/strategiesfortestingai · .github/skills/remediation-validation/SKILL.md · Use when you need to verify whether proposed or applied security remediations satisfy baseline controls and to report…
git:20260424.a607dbd · audit A · 14 stars
runtime-remediation SKILL.md skill
coveros/strategiesfortestingai · .github/skills/runtime-remediation/SKILL.md · Use when you want live, controlled code edits during an AppSec demo: apply minimal hardening changes, validate…
git:20260424.a607dbd · audit A · 14 stars
vulnerability-discovery SKILL.md skill
coveros/strategiesfortestingai · .github/skills/vulnerability-discovery/SKILL.md · Use when you need a repeatable workflow to discover and document likely application security vulnerabilities with…
git:20260424.a607dbd · audit A · 14 stars

Every file in coveros/strategiesfortestingai

Browse by kind, by grade A, or by owner.