neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/integration-pipeline-preview/14-fix-findings
docs/archive/2026-07-ai-artifacts/claude-skills/integration-pipeline-preview/14-fix-findings/SKILL.md
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: 14-fix-findings description: Addresses every blocker finding from phases 12 and 13 and re-runs build and tests. kind: leaf executor: sonnet model: claude-sonnet-4-6 --- # Fix Findings Reads the implementation security and performance findings and resolves every bl
$ install --global
skillsauthnpx skillsauth add neohaskell/neohaskell docs/archive/2026-07-ai-artifacts/claude-skills/integration-pipeline-preview/14-fix-findingsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 9, 2026, 7:55 AM116.5s1 file scanned
SKILL.md
ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE. Superseded by
codemap/+ rootAGENTS.md. Scheduled for deletion once the pipeline is verified (Phase 6). Manifest:docs/archive/2026-07-ai-artifacts/MANIFEST.md
name: 14-fix-findings description: Addresses every blocker finding from phases 12 and 13 and re-runs build and tests. kind: leaf executor: sonnet model: claude-sonnet-4-6
Fix Findings
Reads the implementation security and performance findings and resolves every blocker.
Inputs
.integration-pipeline/findings-12.json.integration-pipeline/findings-13.json.integration-pipeline/integration-architecture.md
Plan
- Read both findings files → verify: both load.
- Filter to entries with
blocker: true→ verify: list captured. - Address each blocker with a code edit → verify: every blocker has a corresponding diff.
- Re-run
nix develop --command cabal build all && nix develop --command cabal test→ verify: both pass.
Assumptions:
- Only blocker findings (
blocker: true) must be fixed in this phase. Non-blockers are tracked but not blocking. - If a fix significantly changes the architecture, escalate to the maintainer for re-review before continuing.
- Test files remain immutable.
If any assumption fails, refuse — do not guess.
Steps
- Load
.integration-pipeline/findings-12.jsonand.integration-pipeline/findings-13.json. - Collect every entry where
blocker: true. - For each blocker, locate the
file:line, read the surrounding code, and apply a targeted fix. - Run
nix develop --command cabal build all. If it fails, apply one more targeted fix and retry — bounded to a total of 3 attempts (1 initial + 2 retries). If still failing, refuse and surface the build log. - Run
nix develop --command cabal test. If it fails, apply one more targeted fix and retry — bounded to a total of 3 attempts (1 initial + 2 retries). If still failing, refuse and surface the test log. - If any fix changes a public type or module boundary, stop and escalate to the maintainer for re-review.
- Run
python3 .claude/skills/integration-pipeline-preview/scripts/pipeline.py complete 14.
Output
All blockers resolved; build and tests green; phase 14 marked complete.
Refusals
- Either findings file missing → refuse: "phase 12 or 13 output missing".
- Any blocker has no
file:linereference → refuse: "blocker is unactionable". - Build or test still failing after fixes → refuse and surface the failure.
Related Skills
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-style-guide
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-style-guide description: NeoHaskell coding style reference and enforcement rules. Load when writing, reviewing, or modifying any Haskell code in the NeoHaskell project. Triggers on 'NeoHaskell style', 'NeoHaskell conventions', 'how to write NeoHaskell', '
347SKILL.mdUpdated Jul 9, 2026
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-security-review
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-security-review description: Security & Code Quality review for NeoHaskell. Use when reviewing code changes, PRs, or architectural decisions for security implications. Evaluates OWASP, NIST, EU compliance. Handles pipeline phases 2 (ADR review) and 10 (im
347SKILL.mdUpdated Jul 9, 2026
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-qa-designer
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-qa-designer description: Testing QA Designer for NeoHaskell. Designs comprehensive test specifications with exhaustive edge cases, boundary conditions, and happy paths BEFORE implementation. Handles pipeline phase 6 (Test Spec Design). Outside-in TDD meth
347SKILL.mdUpdated Jul 9, 2026
neohaskell/docs/archive/2026-07-ai-artifacts/claude-skills/neohaskell-performance-review
development
VerifiedTrustedCommunity
> **ARCHIVAL KNOWLEDGE — DO NOT USE OR REFERENCE.** > Superseded by `codemap/` + root `AGENTS.md`. Scheduled for deletion once the pipeline is verified (Phase 6). > Manifest: `docs/archive/2026-07-ai-artifacts/MANIFEST.md` --- name: neohaskell-performance-review description: Performance review for NeoHaskell targeting 50k req/s throughput. Use when reviewing code for performance implications, INLINE pragmas, strictness, and allocation patterns. Handles pipeline phases 3 (ADR review) and 11 (imp
347SKILL.mdUpdated Jul 9, 2026