🎁 Get the FREE AI Skills Starter Guide β€” Subscribe β†’
BytesAgainBytesAgain
BytesAgain β€Ί Skills β€Ί Clawhub Gomboc Security Main V0.2.0
πŸ¦€ ClawHub

Clawhub Gomboc Security Main V0.2.0

by @matthewsweeney

Automatically scan any codebase for security issues and generate deterministic, merge-ready fixes for continuous remediation via CLI, CI/CD, or agents.

Versionv1.0.0
Downloads428
#devops#legal#automation
TERMINAL
clawhub install clawhub-gomboc-security-main-v0-2-0

πŸ“– About This Skill

Gomboc Code Remediation Skill

Deterministic, merge-ready code fixes for any codebase.

Gomboc.ai Community Edition automatically scans and fixes code issues across your entire codebase β€” infrastructure, applications, configurations, and more β€” using deterministic AI (no hallucinations). This skill wraps Gomboc's power into agent workflows, CLI tools, and CI/CD pipelines, making it the perfect complement to agentic coding.

What It Does

  • Scan any codebase for issues (infrastructure, application code, configs)
  • Generate deterministic, merge-ready pull requests with fixes
  • Remediate continuously via GitHub Actions or interactive CLI/MCP
  • Trust 94%+ fix acceptance rate with zero hallucinations (ORL Engine)
  • Pair with agents β€” deterministic remediation that works perfectly alongside agentic coding systems

    • Supported Languages & Frameworks

  • Infrastructure as Code β€” Terraform, CloudFormation, Kubernetes YAML
  • Configuration Files β€” JSON, YAML, HCL
  • Security Issues β€” Across any codebase (IaC, applications, configs)
  • Expanding β€” More languages and frameworks added regularly

    • Quick Start

    1. Get a Token

    # Sign up at https://app.gomboc.ai (free, Community Edition)

    Generate Personal Access Token in Settings
    
export GOMBOC_PAT="gpt_your_token"

    2. Scan Code

    python scripts/cli-wrapper.py scan --path ./src

    3. Generate Fixes

    python scripts/cli-wrapper.py fix --path ./src

    4. Apply Fixes (Optional)

    python scripts/cli-wrapper.py remediate --path ./src --commit

    Key Features

    βœ… Deterministic AI β€” Same fix every time, no hallucinations βœ… 94%+ Accuracy β€” Merge-ready fixes users actually accept βœ… Free Forever β€” Community Edition of Gomboc.ai βœ… Production-Ready β€” Battle-tested implementation βœ… Secure by Design β€” No token leaking, proper error handling βœ… Agent-Friendly β€” Perfect for autonomous code improvement loops

    CLI Commands

    scan

    Detect issues in your codebase

    gomboc scan path:./terraform
gomboc scan path:./src policy:aws-cis format:markdown

    fix

    Generate merge-ready fixes

    gomboc fix path:./terraform format:pull_request
gomboc fix path:./src format:json

    remediate

    Apply fixes directly to code

    gomboc remediate path:./src commit:true
gomboc remediate path:./terraform commit:true push:true

    config

    Manage authentication

    gomboc config --show-token

    For Agents

    This skill is designed as the ideal complement to agentic coding:

  • Deterministic β€” Reliable, repeatable remediation
  • Trustworthy β€” 94%+ of fixes are merged as-is
  • Autonomous β€” Agents can scan, generate, and apply fixes without human intervention
  • Continuous β€” Perfect for ongoing code improvement loops

    • Integration Methods

    1. MCP Server (Agents)

    Run the MCP server for interactive agent integration:

    docker-compose -f scripts/docker-compose.yml up

    Server runs on http://localhost:3100

    See references/mcp-integration.md for details.

    2. CLI Tool (Developers)

    Use the Python CLI for local scanning and fixing:

    export GOMBOC_PAT="your_token"
python scripts/cli-wrapper.py scan --path ./src

    See references/setup.md for detailed instructions.

    3. GitHub Actions (CI/CD)

    Automate continuous remediation in your CI/CD pipeline:

    - uses: gomboc-action@v1
  with:
    path: ./terraform
    auto-fix: true

    See references/github-action.md for configuration.

    Configuration

    All configuration is via environment variables:

    | Variable | Purpose | Required | Example | |----------|---------|----------|---------| | GOMBOC_PAT | Personal Access Token | Yes | gpt_abc123... | | GOMBOC_MCP_URL | MCP server URL | No | http://localhost:3100 | | GOMBOC_POLICY | Remediation policy | No | default or aws-cis |

    Security & Audit

    This skill has been:

  • βœ… Security-audited for token handling
  • βœ… Verified against live Gomboc API
  • βœ… Tested with real vulnerabilities
  • βœ… Confirmed production-ready

    • See SECURITY.md for complete audit details.

    Support & Documentation

  • Setup Guide: references/setup.md
  • MCP Integration: references/mcp-integration.md
  • GitHub Actions: references/github-action.md
  • Security Audit: SECURITY.md
  • Changelog: CHANGELOG.md
  • GitHub Discussions: https://github.com/Gomboc-AI/gomboc-ai-feedback/discussions

    • License

    MIT License β€” See LICENSE file

    Ready to remediate? Start with the Quick Start section above, then explore integration methods that fit your workflow.

    πŸ’‘ Examples

    1. Get a Token

    # Sign up at https://app.gomboc.ai (free, Community Edition)

    Generate Personal Access Token in Settings
    
export GOMBOC_PAT="gpt_your_token"

    2. Scan Code

    python scripts/cli-wrapper.py scan --path ./src

    3. Generate Fixes

    python scripts/cli-wrapper.py fix --path ./src

    4. Apply Fixes (Optional)

    python scripts/cli-wrapper.py remediate --path ./src --commit

    βš™οΈ Configuration

    All configuration is via environment variables:

    | Variable | Purpose | Required | Example | |----------|---------|----------|---------| | GOMBOC_PAT | Personal Access Token | Yes | gpt_abc123... | | GOMBOC_MCP_URL | MCP server URL | No | http://localhost:3100 | | GOMBOC_POLICY | Remediation policy | No | default or aws-cis |