AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified Apache-2.0 Self-run

Deepdone Fixup

skill-lakesoftai-deepdone-agent-skills-deepdone-fixup · by lakesoftai

Triage and fix accepted local code review findings from a DeepDone workflow, verify the fix, update the epic ledger, and stop when findings require product or architecture judgment.

— No reviews yet
0 installs
31 views
0.0% view→install

Install

$ agentstack add skill-lakesoftai-deepdone-agent-skills-deepdone-fixup

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-lakesoftai-deepdone-agent-skills-deepdone-fixup)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
○ 4mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Deepdone Fixup? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

DeepDone Fixup

Purpose

Fix review findings without turning review into a new unbounded implementation phase.

Use this skill after $deepdone-review or an agent UI review has produced findings.

This skill is allowed to fix findings only when they are:

  • accepted,
  • local,
  • low risk,
  • clearly correct,
  • within the active milestone or active epic,
  • verifiable with a targeted check.

When findings require prioritization, architecture judgment, product behavior changes, security judgment, or broad refactoring, stop and ask the user.

Inputs

Prefer explicit review findings from the user or a review output file.

If no findings are provided, inspect likely sources:

  1. latest agent UI review comments if visible in the thread,
  2. active epic ledger Open Loops,
  3. recent review notes in ## Decisions or ## Verification Log,
  4. git diff and recent conversation context.

If no concrete findings can be found, stop. Do not invent findings.

What To Read

Read:

  • active roadmap if present,
  • active epic ledger,
  • latest review findings,
  • git status --short,
  • git diff,
  • files referenced by findings,
  • relevant tests or verification commands,
  • AGENTS instructions.

Finding Triage

Classify each finding:

Auto-fix allowed

Auto-fix is allowed for:

  • local correctness bug,
  • missing null or error handling,
  • obvious off-by-one or condition bug,
  • typo that breaks behavior,
  • local test expectation update that follows intended behavior,
  • small missing test for the changed behavior,
  • local type/lint failure caused by current diff.

Stop and ask user

Stop for:

  • product behavior change,
  • architecture or API design change,
  • security or permission issue,
  • auth/session issue,
  • data deletion or migration risk,
  • schema change,
  • broad refactor,
  • performance tradeoff with user-visible cost,
  • multiple valid approaches,
  • finding that conflicts with ledger constraints,
  • finding outside active milestone or epic.

Scope Rules

  • Fix only review findings.
  • Do not start the next milestone.
  • Do not opportunistically refactor.
  • Do not rewrite unrelated code.
  • Do not update roadmap except when epic status is affected.
  • Update ledger only with review-fix truth.

Workflow

  1. Locate active work unit.
  2. Read review findings and related diff.
  3. Classify findings into auto-fix, needs user, or reject as non-actionable.
  4. If any high-risk finding exists, stop and ask before editing.
  5. Fix only accepted local findings.
  6. Run the smallest verification command that proves the fix.
  7. Broaden verification only if shared or risky code was touched.
  8. Update active epic ledger:
  • record fixed findings in ## Decisions or ## Open Loops, whichever already fits the ledger truth,
  • append exact checks under ## Verification Log with command:, result: pass|fail|blocked, and notes:,
  • update Next Action.
  1. If review should be rerun, set Next Action to run $deepdone-review.
  2. Return result block.

Ledger Write Policy

Do not create new sections.

Use existing sections:

  • ## Decisions: accepted review-fix choice or cleanly rejected non-issue.
  • ## Verification Log: exact commands and structured result: pass|fail|blocked markers.
  • ## Open Loops: findings that remain unresolved or require user decision.
  • ## Next Action: one exact next step.
  • ## Status: update only if the epic is blocked by findings.

Verification Policy

Run at least one targeted check unless impossible.

If checks cannot run, record the blocker and residual risk.

Do not claim the fix is complete based on inspection only unless the finding was documentation-only or non-executable.

Output

Return:

  • active ledger path,
  • findings fixed,
  • findings deferred to user,
  • files touched,
  • checks run,
  • next action,
  • residual risk.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.