Install
$ agentstack add skill-lakesoftai-deepdone-agent-skills-deepdone-fixup ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
DeepDone Fixup
Purpose
Fix review findings without turning review into a new unbounded implementation phase.
Use this skill after $deepdone-review or an agent UI review has produced findings.
This skill is allowed to fix findings only when they are:
- accepted,
- local,
- low risk,
- clearly correct,
- within the active milestone or active epic,
- verifiable with a targeted check.
When findings require prioritization, architecture judgment, product behavior changes, security judgment, or broad refactoring, stop and ask the user.
Inputs
Prefer explicit review findings from the user or a review output file.
If no findings are provided, inspect likely sources:
- latest agent UI review comments if visible in the thread,
- active epic ledger
Open Loops, - recent review notes in
## Decisionsor## Verification Log, - git diff and recent conversation context.
If no concrete findings can be found, stop. Do not invent findings.
What To Read
Read:
- active roadmap if present,
- active epic ledger,
- latest review findings,
git status --short,git diff,- files referenced by findings,
- relevant tests or verification commands,
- AGENTS instructions.
Finding Triage
Classify each finding:
Auto-fix allowed
Auto-fix is allowed for:
- local correctness bug,
- missing null or error handling,
- obvious off-by-one or condition bug,
- typo that breaks behavior,
- local test expectation update that follows intended behavior,
- small missing test for the changed behavior,
- local type/lint failure caused by current diff.
Stop and ask user
Stop for:
- product behavior change,
- architecture or API design change,
- security or permission issue,
- auth/session issue,
- data deletion or migration risk,
- schema change,
- broad refactor,
- performance tradeoff with user-visible cost,
- multiple valid approaches,
- finding that conflicts with ledger constraints,
- finding outside active milestone or epic.
Scope Rules
- Fix only review findings.
- Do not start the next milestone.
- Do not opportunistically refactor.
- Do not rewrite unrelated code.
- Do not update roadmap except when epic status is affected.
- Update ledger only with review-fix truth.
Workflow
- Locate active work unit.
- Read review findings and related diff.
- Classify findings into auto-fix, needs user, or reject as non-actionable.
- If any high-risk finding exists, stop and ask before editing.
- Fix only accepted local findings.
- Run the smallest verification command that proves the fix.
- Broaden verification only if shared or risky code was touched.
- Update active epic ledger:
- record fixed findings in
## Decisionsor## Open Loops, whichever already fits the ledger truth, - append exact checks under
## Verification Logwithcommand:,result: pass|fail|blocked, andnotes:, - update
Next Action.
- If review should be rerun, set
Next Actionto run$deepdone-review. - Return result block.
Ledger Write Policy
Do not create new sections.
Use existing sections:
## Decisions: accepted review-fix choice or cleanly rejected non-issue.## Verification Log: exact commands and structuredresult: pass|fail|blockedmarkers.## Open Loops: findings that remain unresolved or require user decision.## Next Action: one exact next step.## Status: update only if the epic is blocked by findings.
Verification Policy
Run at least one targeted check unless impossible.
If checks cannot run, record the blocker and residual risk.
Do not claim the fix is complete based on inspection only unless the finding was documentation-only or non-executable.
Output
Return:
- active ledger path,
- findings fixed,
- findings deferred to user,
- files touched,
- checks run,
- next action,
- residual risk.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: lakesoftai
- Source: lakesoftai/deepdone-agent-skills
- License: Apache-2.0
- Homepage: https://deepdone.ai
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.