smithery.ai

remediation-library

Index of security remediation skills. Routes to specialized skills for injection, cryptography, authentication, and configuration vulnerabilities.

First seen Mar 28, 2026

Installation

$ npx skills add https://smithery.ai

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Also in this package

Other skills from smithery.ai · top by installs.

npx skills add https://smithery.ai

Browse all from smithery.ai

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 2,903 B
  • docs SUMMARY.md 173 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 1 installs

SKILL.md

Remediation Library

This skill is an index to modular remediation guides. Use the specialized skills below for focused remediation guidance.

When to Use This Skill

  • Finding the right remediation skill - Use this index to route to the appropriate specialized skill
  • Overview of available fixes - Quick reference of what's available

When NOT to Use This Skill

  • Detecting vulnerabilities - Use vulnerability-patterns skill
  • Specific remediation - Use the specialized skills directly (faster)

Specialized Remediation Skills

remediation-injection

Covers: SQL Injection, Command Injection, XSS CWEs: CWE-89, CWE-78, CWE-79 Use when: Fixing injection vulnerabilities, code review feedback

remediation-crypto

Covers: Weak Cryptography, Insecure Randomness, TLS Issues CWEs: CWE-327, CWE-330, CWE-295 Use when: Fixing crypto vulnerabilities, upgrading algorithms

remediation-auth

Covers: Hardcoded Credentials, JWT Security, Deserialization, Access Control CWEs: CWE-798, CWE-347, CWE-502, CWE-862 Use when: Fixing auth issues, secrets management, authorization

remediation-config

Covers: Path Traversal, Debug Mode, Security Headers CWEs: CWE-22, CWE-489, CWE-693 Use when: Fixing deployment issues, hardening configuration


Quick Routing Guide

Vulnerability Type Skill to Use
SQL Injection remediation-injection
Command Injection remediation-injection
XSS remediation-injection
Weak hashing (MD5/SHA1) remediation-crypto
Insecure randomness remediation-crypto
TLS disabled remediation-crypto
Hardcoded secrets remediation-auth
JWT issues remediation-auth
Unsafe deserialization remediation-auth
Missing access control remediation-auth
Path traversal remediation-config
Debug in production remediation-config
Missing headers remediation-config

OWASP Mapping

OWASP 2021 Primary Skill
A01 Broken Access Control remediation-auth
A02 Cryptographic Failures remediation-crypto
A03 Injection remediation-injection
A04 Insecure Design Multiple
A05 Security Misconfiguration remediation-config
A06 Vulnerable Components N/A
A07 Auth Failures remediation-auth
A08 Data Integrity Failures remediation-auth
A09 Logging Failures remediation-config
A10 SSRF remediation-injection

See Also

  • vulnerability-patterns - Detection patterns
  • asvs-requirements - ASVS compliance mapping
  • audit-report - Report formatting