A security-fix helper that creates small, testable code changes for confirmed vulnerabilities. It also turns each proof-of-concept demonstration into a regression test, which checks that the flaw stays fixed.

It applies fixes for several vulnerability categories, checks all affected call sites, reviews the patch for unintended effects, and produces a unified diff and regression tests.

It reduces the risk of incomplete patches, missed vulnerable code paths, or fixes that introduce a new timing-related bug.

mcp2agy-fix — Skill for Claude Code and Codex by uziii2208/mcp2agy

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add uziii2208/mcp2agy --skill fix

Clone the repo

git clone --depth 1 https://github.com/uziii2208/mcp2agy

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/uziii2208/mcp2agy/fix/github.svg)](https://agentmods.dev/skills/uziii2208/mcp2agy/fix)

Your own site

<a href="https://agentmods.dev/skills/uziii2208/mcp2agy/fix"><img src="https://agentmods.dev/badge/skills/uziii2208/mcp2agy/fix/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/uziii2208/mcp2agy/fix"><img src="https://agentmods.dev/badge/skills/uziii2208/mcp2agy/fix.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 89 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,560 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00089	$0.01560
Opus 5.5	$0.00036	$0.00624
Sonnet 5.5	$0.00018	$0.00312
Haiku 4.5	$0.00009	$0.00156

Measured 2mo ago against content hash b535193b089c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mcp2agy-fix scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/plugins/mcp2agy/skills/fix/SKILL.md · 146 lines

How it starts

The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/fix — Security Code Remediation & Subagent (v3.0.0)

0. Prime Directive & Remediation Principles

The Fixer produces patches that are minimal, correct, and provably effective:

Multi-Site Completeness: Patch EVERY vulnerable call site in the project, not just the one hit by the PoC.
Atomicity Check: Ensure the fix does NOT introduce a new TOCTOU race condition (e.g. check-then-act os.path.exists before open instead of O_CREAT | O_EXCL).
No Scope Creep: Change ONLY what is required to remediate the vulnerability. Do not refactor unrelated code.
PoC-as-Regression-Test: Convert the Verifier's PoC into a permanent automated unit test that passes with the patch and fails without it.

Operating Modes:

Subagent Mode (Delegated by Orchestrator):
- Consumes verified_findings.yaml from mcp2agy_workspace/auditor_zone/results/<run_id>/.
- Generates minimal diff at mcp2agy_workspace/auditor_zone/results/<run_id>/fixes.diff.
- Generates regression test harnesses in mcp2agy_workspace/auditor_zone/results/<run_id>/regression_tests/.
- Responds to the Orchestrator with patch metrics.
Standalone Mode (CLI /fix <finding_yaml>):
- Generates patch and test harness for individual finding.

⚠️ CRITICAL: MCP Tool Usage Policy

NEVER call call_mcp_tool() or any MCP server tools directly when running as a subagent. MCP tools (e.g., generate_fix, check_fix_completeness, list_fix_templates) are lazy-loaded and require interactive user approval. When a subagent calls an MCP tool, it blocks indefinitely.

Instead, generate fixes using native tools:

view_file — Read verified findings, source code, and evidence
replace_file_content — Apply minimal code patches
write_to_file — Generate regression test harnesses and diff files
grep_search — Find all call sites for multi-site completeness
run_command — Run tests and verify fixes

If the Orchestrator has pre-gathered MCP tool data, it will be provided in your invocation prompt.

Read the full file on GitHub · 146 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 146 lines · 89 tokens per session scan A b535193b089c

Subscribe to this mod's changes

mcp2agy-fix is a skill published in the GitHub repository uziii2208/mcp2agy (1 stars, last pushed 2mo ago), licensed MIT. It adds 89 tokens to every session and 1,560 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Security Testing

research-engineer

An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.

davila7/claude-code-templates · 43 tokens

tika-eval-compare

Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".

apache/tika · 50 tokens

cua-driver

Use Cua Driver for desktop or browser tasks that are awkward or unavailable through Bash/APIs, or when the user explicitly wants GUI interaction: app testing, visual bug reproduction, form filling, calendar entry, screenshots, and demo recording. Also covers Cua setup; not OpenAI Codex Computer Use or web research.

davidondrej/skills · 68 tokens

jetson-validate-image

Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.

NVIDIA/skills · 50 tokens

atmos-validation

Validate Atmos projects, components, arbitrary JSON Schema inputs, EditorConfig, and GitHub Actions; use affected-file selection and native CI annotations.

cloudposse/atmos · 31 tokens

tdd

Guided test-driven development workflow for .NET 10 using xUnit v3, WebApplicationFactory, Testcontainers, and Verify snapshots. Follows the strict red-green-refactor cycle. Use when: "TDD", "test-driven", "let's TDD this", "red green refactor", "write the test first", or when building a feature with clear acceptance…

codewithmukesh/dotnet-claude-kit · 81 tokens