The Blacksmith
AI Fixes
The Blacksmith turns every finding into a drop-in remediation prompt — the issue, the evidence, the exact code change — engineered for your AI agent.
CRITSQL injection · /api/user Copy
Fix: The id param is interpolated straight into the query — switch it to a parameterized statement so the driver escapes input.
// src/api/user.ts
- db.query(`SELECT * FROM users WHERE id=$${id}`)
+ db.query('SELECT * FROM users WHERE id=$1', [id])
- db.query(`SELECT * FROM users WHERE id=$${id}`)
+ db.query('SELECT * FROM users WHERE id=$1', [id])
Paste intoClaudeCursorWindsurf
Copy-paste ready
Built for Claude Code, Cursor, and Windsurf. Paste, review, ship.
Evidence included
Each prompt carries the proof so the model fixes the real bug, not a guess.
Minutes, not days
Close shipped vulnerabilities in the same session you found them.
How it works
From URL to patched in four steps.
01
Open a finding
02
Copy the fix prompt
03
Paste into your agent
04
Ship the patch
82