patch
Third leg of the static pipeline (
/vuln-scan
→
/triage
→
/patch
).
Turns a ranked list of verified findings into candidate diffs.
The skill
never applies a diff
to the target repo. Output is inert text
in
./PATCHES/
for a human to review and apply out-of-band — see
docs/patching.md#reviewing-generated-patches
. There is no
--apply
or
--approve
flag by design: the capability isn't present, so it can't be
prompt-injected into use.
Invoke with
/patch
patch
安装
npx skills add https://github.com/anthropics/defending-code-reference-harness --skill patch