{
 "schema_version": 1,
 "generated": "2026-10-20",
 "id": "nealbridges-vulnhunter--fix-a-confirmed-finding-test-first",
 "repo": "nealbridges/VulnHunter",
 "repo_url": "https://github.com/nealbridges/VulnHunter",
 "repo_slug": "nealbridges-vulnhunter",
 "title": "Fix a confirmed finding with a failing test first",
 "page_title": "How to fix a confirmed finding with a failing test first with Vuln Hunter",
 "summary": "Turn one verified finding into a red-then-green security fix and a reviewable pull request.",
 "who": "A developer who has a confirmed finding from a hunt and needs a fix that is proven by a test before it is merged.",
 "problem": "Security fixes often ship without a test that shows the exploit is blocked, so the same flaw can return later.",
 "outcome": "An exploit demo, a failing security test, a code fix that makes it pass, and a pull request that is ready for review.",
 "steps": [
  "Confirm the finding you want to fix from the output of a previous `/vulnhunt` run",
  "Open your agent harness in the repository that contains the finding",
  "Run `/vulnhunter-fix` and name the finding you want to remediate",
  "Check that the agent wrote the exploit demo and a security test that fails before the fix (RED)",
  "Check that the code fix makes the test pass (GREEN) and that the exploit is blocked without regressions before you review the pull request"
 ],
 "agent_prompt": "Using the VulnHunter repo at nealbridges/VulnHunter, run the /vulnhunter-fix skill on the finding <finding ID> in <target repo path>. Return the exploit demo, the RED test output, the GREEN test output, and a pull request link or diff. Verify that the security test fails before the code change and passes after it.",
 "agents": [
  "any"
 ],
 "difficulty": "Intermediate",
 "time": "45 minutes",
 "basis": "readme",
 "caveat": "The skill cuts a reviewable PR, so a human reviewer still needs to read the change before it merges.",
 "category": "Security and science",
 "tags": [
  "Security and science"
 ],
 "lang": "python",
 "requirements": [
  "Source code you own or are authorized to audit",
  "Your own model access, using the most capable reasoning model your agent harness offers",
  "An agent harness with a skills directory and subagent support",
  "Python and git installed locally"
 ],
 "risk": "dual-use",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.9,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/nealbridges-vulnhunter/fix-a-confirmed-finding-test-first/",
 "md": "https://dedupedai.com/use-cases/nealbridges-vulnhunter/fix-a-confirmed-finding-test-first/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/nealbridges-vulnhunter--fix-a-confirmed-finding-test-first.json",
 "api_version": "v1"
}