Installs into .claude/skills of the current project.
Are you the author of Sniff Fix?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/neversight-sniff-fix)
---
name: sniff-fix
description: Scan the project and auto-fix safe issues (remove debugger statements, console.log calls, and other auto-fixable problems).
user-invocable: false
---
# /sniff-fix - Scan and fix issues
Scan the project, then automatically fix safe issues.
This skill is invoked by the `sniff` skill's own flow, not on its own. The `user-invocable: false` frontmatter key is honored by Claude Code only, so in other agents this file may show up as a standalone command; treat it as a step inside a sniff run rather than an entry point.
## What to do
1. Use the unified `sniff` MCP tool with `mode: "scan"` and the project's `rootDir` to get all findings. If the unified tool is not available, use legacy `sniff_scan`.
2. For each finding, fix it if safe:
- `debug-debugger`: Remove the `debugger;` line
- `debug-console-log`: Remove `console.log/debug/info` lines
- `placeholder-lorem`: Flag to user (needs manual replacement)
- `hardcoded-localhost`: Suggest environment variable
- `api-hardcoded-secret`: Remove the secret and suggest env var
3. Do NOT auto-fix without telling the user what you're changing
4. After fixing, re-run unified `sniff` with `mode: "scan"` to verify issues are resolved
## Example
```
User: /sniff-fix
You: I'll scan and fix what I can.
Found 8 issues. Auto-fixing 4:
- Removed `debugger` from src/handler.ts:42
- Removed `console.log` from src/api.ts:8
- Removed `console.log` from src/api.ts:15
- Removed `console.debug` from src/utils.ts:3
4 issues need manual attention:
- src/config.ts:8 - Hardcoded localhost URL (replace with env var)
- README.md:28 - Broken link to ./missing-guide.md
- ...
Re-scanning... 4 issues remaining (down from 8).
```
