bug-to-patch-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bug-to-patch-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automatically generate code fixes from bug reports, failing tests, error messages, and stack traces. Analyzes bug context, identifies root causes, and produces verified patches.
Understand bugs from multiple sources:
Determine the underlying issue:
Create targeted fixes:
Ensure fix correctness:
Collect all relevant information:
From failing tests:
FAILED tests/test_calculator.py::test_divide - ZeroDivisionError: division by zero
def test_divide():
result = divide(10, 0)
assert result == None # Expected to return None for division by zeroFrom error messages:
Traceback (most recent call last):
File "app.py", line 42, in process_data
result = data[index]
IndexError: list index out of rangeFrom bug reports:
Title: App crashes when processing empty file
Steps to reproduce:
1. Upload empty CSV file
2. Click "Process"
3. App crashes with NoneType error
Expected: Error message shown to user
Actual: Application crashesIdentify the root cause:
Questions to answer:
Common bug patterns:
Find the code that needs fixing:
# Read the source file
def divide(a, b):
return a / b # Bug: No check for b == 0Context needed:
Create minimal, focused fix:
Patch format:
# Before (buggy code)
def divide(a, b):
return a / b
# After (fixed code)
def divide(a, b):
if b == 0:
return None # or raise ValueError("Cannot divide by zero")
return a / bPatch components:
Ensure correctness:
Validation steps:
# Test that should now pass
def test_divide_by_zero():
assert divide(10, 0) is None
# Additional tests for edge cases
def test_divide_normal():
assert divide(10, 2) == 5
def test_divide_negative():
assert divide(-10, 2) == -5Verification checklist:
Bug report:
AttributeError: 'NoneType' object has no attribute 'upper'Buggy code:
def format_name(name):
return name.upper()Root cause: No validation for None input
Patch:
def format_name(name):
if name is None:
return "" # or raise ValueError("Name cannot be None")
return name.upper()Explanation:
Alternative approaches:
# Option 1: Raise exception
def format_name(name):
if name is None:
raise ValueError("Name cannot be None")
return name.upper()
# Option 2: Use default parameter
def format_name(name=None):
return (name or "").upper()
# Option 3: Type hint and early return
def format_name(name: str | None) -> str:
if not name:
return ""
return name.upper()Bug report:
IndexError: list index out of rangeFailing test:
def test_get_last_element():
arr = [1, 2, 3]
assert get_element(arr, 3) == 3 # Want last elementBuggy code:
def get_element(arr, index):
return arr[index] # index 3 is out of bounds for length 3Root cause: Confusion between length and index (0-based)
Patch:
def get_element(arr, index):
if index < 0 or index >= len(arr):
raise IndexError(f"Index {index} out of range for array of length {len(arr)}")
return arr[index]Explanation:
Better alternative:
def get_element(arr, index):
"""Get element at index. Supports negative indexing."""
try:
return arr[index]
except IndexError:
raise IndexError(f"Index {index} out of range for array of length {len(arr)}")Bug report:
Application crashes when file doesn't exist
FileNotFoundError: [Errno 2] No such file or directory: 'config.json'Buggy code:
def load_config():
with open('config.json') as f:
return json.load(f)Root cause: No handling for missing file
Patch:
def load_config():
try:
with open('config.json') as f:
return json.load(f)
except FileNotFoundError:
# Return default config
return {"debug": False, "port": 8080}
except json.JSONDecodeError as e:
raise ValueError(f"Invalid JSON in config.json: {e}")Explanation:
Alternative with logging:
import logging
def load_config():
try:
with open('config.json') as f:
return json.load(f)
except FileNotFoundError:
logging.warning("config.json not found, using defaults")
return {"debug": False, "port": 8080}
except json.JSONDecodeError as e:
logging.error(f"Invalid JSON in config.json: {e}")
raiseFailing test:
def test_is_even():
assert is_even(0) == True # FAILS
assert is_even(2) == True
assert is_even(3) == FalseBuggy code:
def is_even(n):
if n % 2: # Bug: 0 % 2 == 0 which is falsy
return False
return TrueRoot cause: Incorrect boolean logic (0 is falsy)
Patch:
def is_even(n):
return n % 2 == 0 # Explicitly check equalityExplanation:
Bug report:
Intermittent test failure in multithreaded code
AssertionError: Expected counter=1000, got counter=987Buggy code:
class Counter:
def __init__(self):
self.count = 0
def increment(self):
self.count += 1 # Not atomic!Root cause: Non-atomic operation in concurrent context
Patch (Python):
import threading
class Counter:
def __init__(self):
self.count = 0
self.lock = threading.Lock()
def increment(self):
with self.lock:
self.count += 1Alternative using atomic operations:
from threading import Lock
from threading import local
class Counter:
def __init__(self):
self.count = 0
self._lock = Lock()
def increment(self):
with self._lock:
self.count += 1
# Or use atomic integer
from threading import Lock
class Counter:
def __init__(self):
from queue import Queue
self._queue = Queue()
self.count = 0
# Better: use threading.local or atomic types
import threading
class AtomicCounter:
def __init__(self):
self._value = 0
self._lock = threading.Lock()
def increment(self):
with self._lock:
self._value += 1
return self._value
@property
def value(self):
with self._lock:
return self._valueBug report:
Application memory usage grows unbounded
Memory increases by ~100MB every hourBuggy code:
class Cache:
def __init__(self):
self.data = {}
def store(self, key, value):
self.data[key] = value # Never clears old entries
def get(self, key):
return self.data.get(key)Root cause: Unbounded cache growth
Patch:
from collections import OrderedDict
class Cache:
def __init__(self, max_size=1000):
self.data = OrderedDict()
self.max_size = max_size
def store(self, key, value):
if key in self.data:
# Move to end (most recently used)
self.data.move_to_end(key)
else:
self.data[key] = value
# Evict oldest if over limit
if len(self.data) > self.max_size:
self.data.popitem(last=False)
def get(self, key):
if key in self.data:
# Move to end (most recently used)
self.data.move_to_end(key)
return self.data[key]
return NoneExplanation:
Failing test:
def test_invalid_input():
with pytest.raises(ValueError):
process(-1) # FAILS: raises TypeError insteadBuggy code:
def process(value):
if value < 0:
raise TypeError("Value must be non-negative") # Wrong exception type
return value * 2Root cause: Using TypeError instead of ValueError
Patch:
def process(value):
if value < 0:
raise ValueError("Value must be non-negative") # Correct exception
return value * 2Explanation:
## Bug Fix: [Short description]
### Bug Details
- **Location:** [file:line]
- **Error:** [error message or test failure]
- **Root Cause:** [explanation of the underlying issue]
- **Severity:** [Critical/High/Medium/Low]
### Analysis
[Detailed explanation of why the bug occurs]
### Proposed Fix
#### Changes[buggy code]
[fixed code]
#### Explanation
[Why this fix works and what it does]
#### Alternative Approaches
1. [Alternative 1]: [pros/cons]
2. [Alternative 2]: [pros/cons]
### Validation
#### Tests to Add/Modify[test code that validates the fix]
#### Manual Verification Steps
1. [Step 1]
2. [Step 2]
3. [Expected result]
#### Regression Checks
- [ ] Existing tests still pass
- [ ] No performance degradation
- [ ] No new edge cases introduced
### Related Issues
- Consider also fixing: [related code that may have same issue]
- Similar patterns in: [other files]## Bug Fix: Handle division by zero in calculator
### Bug Details
- **Location:** src/calculator.py:15
- **Error:** `ZeroDivisionError: division by zero`
- **Root Cause:** Missing validation for zero divisor
- **Severity:** High (causes crash)
### Analysis
The `divide` function performs division without checking if the divisor is zero.
When called with b=0, Python raises ZeroDivisionError, crashing the application.
The function should either return None, return infinity, or raise a custom exception
with a clear message.
### Proposed Fix
#### Changesdef divide(a, b): return a / b
def divide(a, b): """Divide a by b. Returns None if b is zero.""" if b == 0: return None return a / b
#### Explanation
Added a check for zero divisor before performing division. Returns None to indicate
invalid operation, which is consistent with other error cases in the codebase.
This prevents the uncaught exception and allows callers to handle the None return.
#### Alternative Approaches
1. **Raise custom exception**: `raise ValueError("Cannot divide by zero")`
- Pros: Explicit error, forces caller to handle
- Cons: More verbose for callers
2. **Return float('inf')**: Mathematical infinity
- Pros: Mathematically correct for positive/negative infinity
- Cons: May cause issues in downstream calculations
3. **Return 0**: Default to zero
- Pros: Simple
- Cons: Mathematically incorrect, hides errors
**Chosen approach: Return None** because it's consistent with the existing codebase
pattern of returning None for invalid operations.
### Validation
#### Tests to Add/Modifydef test_divide_by_zero(): """Test that division by zero returns None.""" assert divide(10, 0) is None assert divide(0, 0) is None assert divide(-5, 0) is None
def test_divide_normal(): """Test normal division still works.""" assert divide(10, 2) == 5 assert divide(10, 3) == pytest.approx(3.333, rel=0.001)
#### Manual Verification Steps
1. Run the failing test: `pytest tests/test_calculator.py::test_divide`
2. Verify it now passes
3. Run full test suite: `pytest`
4. Test in REPL: `divide(10, 0)` should return `None`
#### Regression Checks
- [x] All existing calculator tests pass
- [x] No performance impact (simple check)
- [x] Consistent with other error handling in codebase
### Related Issues
- Consider also checking `modulo` function for same issue
- `power` function may have similar edge cases (0^0, 0^-1)# Bad: Refactoring unrelated code
def divide(a, b):
# Also renamed parameters and restructured
if divisor == 0:
return None
quotient = dividend / divisor
return quotient
# Good: Minimal fix
def divide(a, b):
if b == 0:
return None
return a / b# Bad: Fix creates new issue
def get_first(arr):
if len(arr) == 0:
return None
return arr[1] # Bug! Should be arr[0]
# Good: Correct fix
def get_first(arr):
if len(arr) == 0:
return None
return arr[0]# Bad: Silencing exceptions
def load_data():
try:
return dangerous_operation()
except Exception:
return None # Hides the actual error!
# Good: Specific exception handling
def load_data():
try:
return dangerous_operation()
except FileNotFoundError:
return None # Expected case
# Let other exceptions propagateFor language-specific bug patterns and fixes:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.