sampx/wsf-audit-fix
skills/wsf-audit-fix/SKILL.md
Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit
$ install --global
skillsauthnpx skillsauth add sampx/agent-tools wsf-audit-fixInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 11, 2026, 4:17 AM10.2s1 file scanned
SKILL.md
- name:
- wsf-audit-fix
- description:
- Autonomous audit-to-fix pipeline — find issues, classify, fix, test, commit
- argument-hint:
- --source <audit-uat> [--severity <medium|high|all>] [--max N] [--dry-run]
- read:
- true
- write:
- true
- edit:
- true
- bash:
- true
- grep:
- true
- glob:
- true
- agent:
- true
- question:
- true
<objective>
Run an audit, classify findings as auto-fixable vs manual-only, then autonomously fix
auto-fixable issues with test verification and atomic commits.
Flags:
--max N— maximum findings to fix (default: 5)--severity high|medium|all— minimum severity to process (default: medium)--dry-run— classify findings without fixing (shows classification table)--source <audit>— which audit to run (default: audit-uat) </objective>
<execution_context> @/Users/sam/coding/wopal/wopal-workspace/.wopal/wsf/workflows/audit-fix.md </execution_context>
<process> Execute the audit-fix workflow from @/Users/sam/coding/wopal/wopal-workspace/.wopal/wsf/workflows/audit-fix.md end-to-end. </process>Related Skills
sampx/agent-browser
tools
VerifiedTrustedCommunity
Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.
3SKILL.mdUpdated Jul 29, 2026
sampx/space-master
testing
VerifiedTrustedCommunity
Master specification for WopalSpace. [MUST LOAD FIRST] — Load this skill when Wopal is uncertain how to proceed, task intent is ambiguous, or performing ontology/space maintenance. Triggers: Ambiguous task intent, "what workflow to use", "what skill to load", skill management (install/remove/search), space maintenance (worktrees, sync, PR contribution, promote), multi-space management. [CRITICAL] MUST LOAD whenever interacting with ontology repo operations (update/sync/contribute/promote/PR), even if the user does not explicitly say "upstream sync".
3SKILL.mdUpdated May 11, 2026
sampx/git-worktrees
development
VerifiedTrustedCommunity
Workspace-level Git worktree management — create, list, remove, and prune isolated development environments. Use this skill whenever the user needs to create a worktree, set up an isolated workspace, work on multiple features in parallel, list existing worktrees, check what worktrees exist, remove or delete a worktree, clean up stale worktrees, or manage git working trees in any way. Triggers include "create worktree", "new worktree", "list worktrees", "show worktrees", "remove worktree", "delete worktree", "clean up worktree", "prune worktree", "isolated environment", "parallel development", "worktree for <project>", or any request involving git worktree operations.
3SKILL.mdUpdated Apr 30, 2026
sampx/dev-flow
development
VerifiedTrustedCommunity
Issue/Plan-driven development workflow. Tasks must be backed by a GitHub Issue or Plan. Trigger: issue references like #14, creating issues, creating plans, implementing plans, executing plans, checking plans, verifying plans, Plan lifecycle transitions (approve/complete/verify/archive), decomposing PRDs into Issues. Skip: spec-driven workflows, research/discussion/explanation only, small ad-hoc changes that don't need an Issue or Plan.
3SKILL.mdUpdated Apr 30, 2026