Fix issues with a prompt built for your coding agent

There’s a translation step between a security finding and a fix, and it’s usually done by hand. Someone opens the issue, reads the description, checks the CVSS score, follows the link to the affected asset, works out which endpoint is actually involved, then writes all of