Agent skill

Kesekit Fix

Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems.

MITAuto-check passedSecurity

Install Kesekit Fix

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-fix --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/kesekit-fix .claude/skills/kesekit-fix && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "kesekit-fix" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix into .claude/skills/kesekit-fix/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-fix", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-fix --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/kesekit-fix .agents/skills/kesekit-fix && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "kesekit-fix" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix into .agents/skills/kesekit-fix/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-fix", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-fix --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/kesekit-fix .cursor/skills/kesekit-fix && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "kesekit-fix" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix into .cursor/skills/kesekit-fix/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-fix", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/cdppcorp/KESE-KIT.git --path skills/kesekit-fix

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-fix --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/kesekit-fix .gemini/skills/kesekit-fix && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "kesekit-fix" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix into .gemini/skills/kesekit-fix/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-fix", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-fix

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/kesekit-fix .github/skills/kesekit-fix && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "kesekit-fix" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix into .github/skills/kesekit-fix/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-fix", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-fix --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/kesekit-fix .opencode/skills/kesekit-fix && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "kesekit-fix" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-fix into .opencode/skills/kesekit-fix/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-fix", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: kesekit-fix
GitHub stars: 361
Token cost: ~1.1k tokens
SKILL.md length: 413 words
Files: 86 (incl. scripts, references)
Skills in repo: 8
Repo updated: Apr 9, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems.

Fix vulnerabilities
SKILL.md covers Guideline Selection, CII Branch, AI Security Branch and Robot Security Branch, plus 5 more sections
Apply hardening
Server hardening

What it does

Kesekit Fix is an agent skill from cdppcorp/KESE-KIT. Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems. Generates hardening scripts and SBOM-based vulnerability remediation. Use when "fix vulnerabilities", "apply hardening", "server hardening", "AI security fix", "robot security fix", "space security fix", "satellite hardening", "GSaaS hardening", "supply chain fix", "SBOM fix", "공급망 수정", "취약점 조치".

Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 93 other files, including scripts and reference files (for example `references/ai-security/overview.md`, `references/ai-security/service-provider.md` and `references/ai-security/user-guide.md`).

It sits in Security, covering Supply chain security and Prompt injection and agent security. The repository describes itself as: KISA 주요정보통신기반시설 기술적 취약점 분석 평가방법 상세가이드 기반 Skills. The licence is MIT.

When your agent uses it

Fix vulnerabilities
Apply hardening
Server hardening
AI security fix

Example prompts

“fix vulnerabilities”
“apply hardening”
“server hardening”
“/kesekit-fix”

What it can do on your machine

Read from SKILL.md and the folder at commit cd118f9. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/, which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Kesekit Fix loads about 1.1k tokens when it runs, and up to ~18k if it reads all its reference files. Until then it costs about 100 tokens; SKILL.md has 413 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~100
When it runs · the whole SKILL.md, loaded when a task matches: ~1.1k
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~18k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from cdppcorp/KESE-KIT at commit cd118f9, republished under its MIT licence (© cdppcorp). 413 words, ~1,150 tokens.

Download SKILL.mdSave it as .claude/skills/kesekit-fix/SKILL.md (or your agent's skills folder). This skill also uses 85 other files; get the full folder from GitHub.

name: kesekit-fix
description: Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems. Generates hardening scripts and SBOM-based vulnerability remediation. Use when "fix vulnerabilities", "apply hardening", "server hardening", "AI security fix", "robot security fix", "space security fix", "satellite hardening", "GSaaS hardening", "supply chain fix", "SBOM fix", "공급망 수정", "취약점 조치".

KESE Vulnerability Auto-Fix

Generate and apply fixes based on vulnerability assessment results. Auto-selects guideline.

Guideline Selection

#	Guideline	Description
1	CII Hardening	Platform-specific hardening scripts
2	AI Security Fixes	AI system security hardening
3	Robot Security Fixes	Robot system hardening (IEC 62443, CRA, RED)
4	Space Security Fixes	Space system hardening (CMMC, K-RMF, NIS2, NIST IR 8401)
5	Secure Coding Fixes	Auto-fix vulnerable code patterns (JS/Python, 46 CWE)
6	Zero Trust Fixes	Zero Trust gap remediation (8 elements, 4 maturity levels, ~396 items)
7	SW Supply Chain Fixes	SBOM generation, vulnerability scanning, remediation (29 items)

Zero Trust, ZTA, ZTNA, 제로트러스트, 마이크로세그멘테이션, microsegmentation, SDP, SASE, PEP/PDP, never trust always verify → Zero Trust SBOM, supply chain, 공급망, C-SCRM, SCA, CycloneDX, SPDX, npm audit, pip-audit → SW Supply Chain

CII Branch

Load reference from templates/cii/ → generate hardening scripts saved to scripts/kese-hardening/. Check commands available in scripts/cii/ directory.

AI Security Branch

Load from references/ai-security/ for overview and guidance, and templates/ai-security/ for assessment checklists → generate security hardening code for AI pipelines, model security, API protection, LLM guardrails.

Robot Security Branch

Load from templates/robot-security/ → generate robot security remediation guidance for secure development, supply chain controls, IEC 62443 controls, cyber resilience planning, and wireless security.

Space Security Branch

Load from references/space-security/ for overview and supply chain guidance, and templates/space-security/ for assessment checklists → generate space system hardening guidance. Fix scripts in scripts/space-security/access-control-fix.md, scripts/space-security/system-security-fix.md, scripts/space-security/operations-fix.md.

Secure Coding Branch

Load from references/secure-coding/pseudocode.md for UNSAFE→SAFE pattern pairs. Use templates/secure-coding/javascript.md or templates/secure-coding/python.md for framework-specific fixes. Each item provides the exact code transformation (UNSAFE → SAFE) to apply.

Show full SKILL.md (161 more words)Show less

Zero Trust Branch

Load from references/zero-trust/ for maturity model and architecture, and templates/zero-trust/ for element-specific checklists. Generate remediation guidance based on gap analysis between current and target maturity levels. If OT/ICS detected, also load templates/zero-trust/ot-environment.md and references/zero-trust/ot-guide.md.

Topic	Reference File
Overview	`templates/zero-trust/overview.md`
Identity & Device	`templates/zero-trust/identity-device.md`
Network & System	`templates/zero-trust/network-system.md`
Application & Data	`templates/zero-trust/app-data.md`
Visibility & Automation	`templates/zero-trust/visibility-automation.md`
OT/ICS Environment	`templates/zero-trust/ot-environment.md`
ZT Architecture Reference	`references/zero-trust/overview.md`
Maturity Model Details	`references/zero-trust/maturity-model.md`
OT Deployment Guide	`references/zero-trust/ot-guide.md`

8 core elements, ~396 items across 4 maturity levels. Standards: KISA ZT Guideline 2.0, NIST SP 800-207, CISA ZT Maturity Model.

SW Supply Chain Branch

Load from references/supply-chain/overview.md for C-SCRM/SBOM context. Use scripts/supply-chain/sbom-generate.md for SBOM generation commands (Syft, CycloneDX, language-specific tools). Use scripts/supply-chain/sbom-vuln-scan.md for vulnerability scanning (Grype, npm audit, pip-audit, govulncheck) and license compliance checks. Reference templates/supply-chain/sbom-checklist.md for the 29-item remediation checklist.

Fix workflow: Generate SBOM → Scan vulnerabilities → Prioritize by CVSS → Apply patches → Verify → Update SBOM.

Notes

Always backup before applying fixes
Test in non-production first
Document all changes for compliance audit

Files

SKILL.md and 85 other files (scripts, references) in skills/kesekit-fix of cdppcorp/KESE-KIT.

SKILL.md
references/ai-security/overview.md
references/ai-security/service-provider.md
references/ai-security/user-guide.md
references/secure-coding/overview.md
references/secure-coding/pseudocode.md
references/space-security/overview.md
references/space-security/supply-chain.md
references/supply-chain/overview.md
references/zero-trust/maturity-model.md
references/zero-trust/ot-guide.md
references/zero-trust/overview.md
scripts/ai-security/api-security-check.md
… and 73 more

Open the folder on GitHubat commit cd118f9

Compare with similar skills

Kesekit Fix next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Kesekit Fix compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Kesekit Fix this skillcdppcorp/KESE-KIT	361	—	~1.1k	Automated safety check: Pass	MIT	6 mo ago
Skill Scannergetsentry/skills	1k	4 repos	~2.5k	Automated safety check: Warn	Apache-2.0	6 days ago
Plugin Scanneriflytek/skillhub	5.2k	2 repos	~1.1k	Automated safety check: Notes	Apache-2.0	today
Skill Supply Chain Auditseb1n/awesome-ai-agent-skills	206	—	~2.4k	Automated safety check: Pass	MIT	1 mo ago
AI Security Hardeningsickn33/agentic-awesome-skills	47k	1 repos	~2.7k	Automated safety check: Pass	MIT	yesterday
AI Security HardeningBagelHole/DevOps-Security-Agent-Skills	1.1k	—	~2.5k	Automated safety check: Pass	MIT	4 mo ago

Similar skills

Skill Scanner
getsentry/skills
Official
Scan agent skills for security issues. An agent skill from getsentry/skills.
1k GitHub starsUsed in 4 repos~2.5k tokens
SecurityAuto-check: warnings
Plugin Scanner
iflytek/skillhub
Scan AI agent skills, plugins, MCP servers, and agent tooling for prompt injection, unsafe commands, secret exposure, and supply-chain risks before installing or trusting them.
5.2k GitHub starsUsed in 2 repos~1.1k tokens
SecurityAuto-check: notes
Skill Supply Chain Audit
seb1n/awesome-ai-agent-skills
Audit agent skills, plugins, prompts, manifests, scripts, dependencies, and bundled assets for provenance, prompt-injection, permission, execution, exfiltration, persistence, and update risk.
206 GitHub stars~2.4k tokensUpdated 1 mo ago
SecurityAuto-check passed
AI Security Hardening
sickn33/agentic-awesome-skills
Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.
47k GitHub starsUsed in 1 repo~2.7k tokens
SecurityAuto-check passed
AI Security Hardening
BagelHole/DevOps-Security-Agent-Skills
Harden AI/LLM deployments against prompt injection, data exfiltration, model theft, and supply chain attacks.
1.1k GitHub stars~2.5k tokensUpdated 4 mo ago
SecurityAuto-check passed
Skill Inspector
NVIDIA/SkillSpector
Official
Decides whether an agent skill is safe to install by combining a SkillSpector static scan with the agent's own source review, ending in APPROVE, CAUTION or REJECT.
20k GitHub starsUsed in 1 repo~1.8k tokens
SecurityAuto-check passed

Questions about Kesekit Fix

What does Kesekit Fix do?

Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems. Kesekit Fix is an agent skill from cdppcorp/KESE-KIT. Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems.

When should I use Kesekit Fix?

Kesekit Fix fits situations like: fix vulnerabilities; apply hardening; server hardening; AI security fix.

How do I install Kesekit Fix in Claude Code?

Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a claude-code`. Or copy the skill folder (skills/kesekit-fix in cdppcorp/KESE-KIT) into .claude/skills/kesekit-fix in your project. Claude Code loads it when a task matches its description.

How do I install Kesekit Fix in Codex?

Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a codex`. Or copy the skill folder (skills/kesekit-fix in cdppcorp/KESE-KIT) into .agents/skills/kesekit-fix in your project. Codex loads it when a task matches its description.

Can I use Kesekit Fix in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cdppcorp/KESE-KIT --skill kesekit-fix -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/kesekit-fix, .gemini/skills/kesekit-fix, .github/skills/kesekit-fix and .opencode/skills/kesekit-fix in your project.

What does Kesekit Fix need to run?

SKILL.md names no scripts, command-line tools or credentials: Kesekit Fix is instructions for the agent only.

Does Kesekit Fix access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Kesekit Fix safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Kesekit Fix use?

Kesekit Fix is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Kesekit Fix use?

About 1.1k tokens (SKILL.md is roughly 4.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 16k tokens, read only when the agent opens those files.

What are the alternatives to Kesekit Fix?

Skills that share tags, products or a category with Kesekit Fix: Skill Scanner (getsentry/skills, 1k stars), Plugin Scanner (iflytek/skillhub, 5.2k stars), Skill Supply Chain Audit (seb1n/awesome-ai-agent-skills, 206 stars) and AI Security Hardening (sickn33/agentic-awesome-skills, 47k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Kesekit Fix?

cdppcorp (a GitHub organization) maintains it in cdppcorp/KESE-KIT, which has 361 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on April 9, 2026.

Source: cdppcorp/KESE-KIT on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Kesekit Fix

Facts

At a glance

What it does

When your agent uses it

Example prompts

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

KESE Vulnerability Auto-Fix

Guideline Selection

CII Branch

AI Security Branch

Robot Security Branch

Space Security Branch

Secure Coding Branch

Zero Trust Branch

SW Supply Chain Branch

Notes

Files

Compare with similar skills

Similar skills

More from cdppcorp/KESE-KIT

Related

Questions about Kesekit Fix