Borrowing it
Nothing to install: this file belongs to dixus/claudeframework. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/dixus/claudeframework/main/.claude/skills/3_fix/SKILL.mdgit clone --depth 1 https://github.com/dixus/claudeframeworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dixus/claudeframework/3_fix)<a href="https://agentmods.dev/skills/dixus/claudeframework/3_fix"><img src="https://agentmods.dev/badge/skills/dixus/claudeframework/3_fix/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dixus/claudeframework/3_fix"><img src="https://agentmods.dev/badge/skills/dixus/claudeframework/3_fix.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00027 | $0.01675 |
| Opus 5.5 | $0.00011 | $0.00670 |
| Sonnet 5.5 | $0.00005 | $0.00335 |
| Haiku 4.5 | $0.00003 | $0.00168 |
Grade A, and why
3_fix scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Fix issues found in a review report.
Steps:
-
Read CLAUDE.md — note the project's test command, lint command, build command, and typecheck command if listed
-
If $ARGUMENTS is provided, read
.claude/reviews/<name>-review.md. Otherwise read the most recently modified file in.claude/reviews/ -
If a corresponding spec exists in
.claude/specs/, read it too — fixes must stay within the spec's stated requirements a. Phase awareness: if.claude/specs/<name>-phases.mdexists, read it. Fixes must stay within the current phase's scope. If a review issue references a requirement that belongs to a later (pending) phase, skip it with "out of scope for current phase" — do not implement it. -
Parse the Issues section — work through them in order of severity: critical first, then major, then minor
-
Circuit breaker: for each issue, check whether it appeared in a previous review of the same spec. If the same issue has recurred across two or more review cycles, flag it as a recurring failure, stop fixing, and escalate to the user with a description of the root cause — do not attempt a third fix for the same problem without user guidance.
-
Scope gate: only touch files that are explicitly mentioned in the Issues section of the review report. For each issue: read the affected file, understand the problem, then apply a minimal fix — do not refactor, clean up, or improve any code outside those files. Unrelated issues belong in the next review cycle, not this fix cycle.
-
After fixing all issues, run the project's verify commands in this order (read them from CLAUDE.md, skip any not listed): a. Typecheck b. Lint c. Tests d. Build (if listed)
-
If any verify step fails, fix those failures too. If a verify step still fails after two fix attempts, stop and escalate to the user — do not loop.
-
Contract re-check: read the spec's
## Contractsection and re-run every item'sverifycommand (from itscwdif set, otherwise the repo root) — the fixes may have broken a criterion that was previously green. Fortype: e2eitems, run against the environment the item'senvfield names; before anyenv: localrun, probe that the local stack is up — an unreachable stack is a blocker to escalate, not a failed criterion. Formanualitems, re-confirm the criterion by reading the code. List each item and its status. A non-zero exit is a new critical issue that must be fixed before continuing. (In phased mode, only check the contract ids assigned to the current phase.)Do this here rather than leaving it to
/shipStep 5: catching a regressed criterion inside the fix cycle costs one re-run, while letting Step 5 catch it costs a whole review/fix cycle.If the spec has no
## Contractsection (legacy spec), fall back to the previous behaviour: if the spec has a "Validation criteria" section, confirm each criterion is still met after the fixes and list each criterion with its status. -
Self-check against review items: before declaring done, re-read the review file and verify each issue one by one: a. For each issue marked in the review, re-read the affected file at the specific line b. Confirm the fix actually addresses the issue described — not just a nearby change c. Check that the fix didn't introduce a new problem in the same area (e.g. breaking an import, changing a signature without updating callers) d. If any issue is NOT actually resolved, fix it now before proceeding This step prevents the common pattern where
/3_fixreports "all fixed" but the next/2_reviewfinds the same issues still present. -
Spec-anchored check: review whether any fixes diverged from the spec's stated requirements. If they did, do not update the spec — the spec is ground truth. Instead, document the divergence in the report (step 13) and flag it for user decision. Only the user may approve spec changes.
This applies to the
## Contractwith no exceptions. Making a failingverifypass by widening its filter, repointing it at a broader suite, relaxing the criterion, or flipping the item tomanualis a spec change disguised as a fix — it is the one edit that silently disables the gate the contract exists to provide. Fix the code so the command passes as written, or escalate the item to the user. -
Self-improvement gate: for each fixed issue, ask whether a rule would prevent recurrence. If yes, write it to
.claude/context/lessons.mdimmediately using this format:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +12 lines 35bfdfbae8dc
- 2mo ago First seen · 68 lines · 27 tokens per session scan A b1b6e7c83b85
3_fix is a skill published in the GitHub repository dixus/claudeframework (10 stars, last pushed 1mo ago), licensed MIT. It adds 27 tokens to every session and 1,675 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
systematic-debugging
Use when debugging a failing test, build error, or runtime issue that isn't immediately obvious. Guides a 4-phase root cause analysis instead of random fix attempts.
log-error-digest
Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports. Supports JSON, syslog, and Nginx formats with automatic detection. Use when a user uploads a .log file and asks to analyze errors, find patterns, debug issues, or…
cwv-optimizer
Diagnose and fix Core Web Vitals issues on AEM Edge Delivery Services pages. Goes deeper than generic CWV advice by understanding EDS-specific performance patterns including the 100KB LCP budget, E-L-D loading phases, block rendering behavior, and third-party script impact. Produces specific fixes for LCP, CLS, and…
incident-response-incident-response
Coordinate production incident triage, mitigation, investigation, recovery, and follow-up. Use when responding to outages or other incidents that require structured operational coordination.
ci-fixer
CI failures - read error, minimal fix, verify.
diagnosing-missing-recordings
Diagnoses why a session recording is missing or was not captured. Use when a user asks why a session has no replay, why recordings aren't appearing, or wants to troubleshoot session replay capture issues for a specific session ID or across their project. Covers SDK diagnostic signals, project settings, sampling…