--- title: "Fixer: review, role & definition · Undominated.ai" canonical: https://undominated.ai/agents/trailofbits-fixer/ description: "Applies dispatched blocking fixes only inside the workflow's scope globs, and records a verdict instead of skipping a finding or discarding the worktree." --- # Fixer: review, role & definition · Undominated.ai > Applies dispatched blocking fixes only inside the workflow's scope globs, and records a verdict instead of skipping a finding or discarding the worktree. [← Explore all agents](/agents/) CODE MAINTENANCE / Trail of Bits # Fixer Applies dispatched blocking fixes only inside the workflow's scope globs, and records a verdict instead of skipping a finding or discarding the worktree. [Use this definition ↓](#setup)[Original source ↗](https://github.com/trailofbits/skills/tree/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/code-improver/agents) SOURCE REVIEW Reviewed 2026-10-14 Evidence 4 linked sources Publisher Trail of Bits Licence [CC-BY-SA-4.0 ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Revision 8e54050ae63c [Read what was—and wasn’t—checked ↓](#review) “Workflow-only fixer that returns fixed, rejected, or deferred for each dispatched finding and refuses out-of-scope edits and several git commands.” [Trail of Bits · upstream description ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/code-improver/agents/fixer.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - The description limits dispatch to the code-improver workflow and says the agent is not for ad-hoc editing. - An edit outside the dispatched scope globs is rejected rather than made, and the git-safety rule forbids checkout, stash, reset, clean, and commit. ### A good fit for - A code-improver round that already has blocking findings, scope globs, and a git worktree the loop is guarding ### Weigh up before choosing - A Markdown profile does not register a native subagent by itself. - The install command adds the Trail of Bits marketplace. It does not install this agent by itself. - This review did not execute the resource. - The plugin README says clients other than Claude Code, such as Codex, may load skills through marketplace compatibility, but the loop that dispatches this agent is unavailable there. - Listed tools include Edit, Write, and Bash. The scope and git-safety limits are instructions in the file. This review did not test a host policy that enforces them. - The plugin README's shorter ban list names checkout, stash, reset, and commit. This file also names git clean. The README does not say clean is allowed. - The code-improver README does not contain a single-line install command for this plugin alone. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - plugins/code-improver/agents/fixer.md - plugins/code-improver/README.md - README.md - LICENSE ### Our findings - The description says the agent is dispatched by the code-improver workflow only and is not for ad-hoc editing. - Every dispatched finding needs a verdict. Deferred is for minor or info only, and a critical or major finding is not deferred. - Only files inside the dispatched scope globs may be touched. An out-of-scope edit is rejected and not made. - The git-safety rule forbids git checkout --, git stash, git reset, git clean, and git commit. A created file is registered with git add -N so the diff and the scope guard can see it. - A fix that changes executable behavior needs a test or assertion that fails on the pre-fix code. The file says never to weaken a documented guarantee, threat model, or stated behavior to clear a finding. ### Not established by this review - The resource was not executed and its tools were not called. - No finding list or git worktree was supplied. - The improve workflow script was not opened. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Use the role in your project. [Upstream setup instructions ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) DOCUMENTED COMMAND /plugin marketplace add trailofbits/skills Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The repository README at this pin shows /plugin marketplace add trailofbits/skills as one unindented line. That line adds the marketplace, not this agent. - The same README shows /plugin menu for browsing plugins. It does not name fixer.md. - The code-improver README describes /code-improver:improve as the workflow that dispatches this fixer. It has no single-line plugin install command. ### Before you start - Claude Code with the dynamic-workflow support the plugin README requires - A code-improver dispatch that already names the findings and the scope globs - A git working tree, which that README says the scope guard diffs against a baseline ### Compatibility Claude Code ### Workflow-dispatched edits inside scope globs - Edit, Write, and Bash are listed. The contract limits edits to the dispatched scope globs. - The contract forbids the named git commands that discard, clean, or commit the worktree. - It does not grant a commit. The plugin README says the run leaves changes in the working tree. ### Cost model CC-BY-SA-4.0 with attribution and share-alike. No fee is stated for this file, and the agent was not run. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [fixer agent ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/code-improver/agents/fixer.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/code-improver/agents/fixer.md Supports: workflow-only dispatch, scope rejection, and git-safety contract - [Repository root LICENSE ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/LICENSE Supports: CC-BY-SA-4.0 Attribution-ShareAlike 4.0 International - [code-improver README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/code-improver/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/plugins/code-improver/README.md Supports: this file is the plugin fixer, and the loop is unavailable outside Claude Code - [Repository README ↗](https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md) Checked 2026-10-14 https://github.com/trailofbits/skills/blob/8e54050ae63c2f62224c35b1616efe71865b4777/README.md Supports: marketplace install line and the same CC-BY-SA-4.0 statement KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Dimension propagator ↗ Propagates dimensional comments through assigned files, refuses executable edits, and reports mismatches instead of fixing them.](/agents/trailofbits-dimension-propagator/)[### Code Simplifier ↗ Refines recently changed code for clearer structure and naming while explicitly keeping its behavior and scope intact.](/agents/anthropic-code-simplifier/)[### Git Workflow Master ↗ Establishes branch hygiene with copy-safe commands — trunk-based versus Git Flow diagrams, --no-track branch creation, worktrees for parallel work, force-with-lease over force-push — and warns before every destructive operation.](/agents/agency-git-workflow-master/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Find reusable instructions](/skills/) - [Inspect connections](/mcp-servers/) - [Build a toolkit](/tools/) - [Choose the model](/compare/)