Vulnerability Patterns

This skill is an index to modular detection pattern skills. Use the specialized skills for focused scanning.

When to Use This Skill

Finding the right pattern skill - Use this index to route appropriately
Overview of detection capabilities - Quick reference of what's available

When NOT to Use This Skill

Actual vulnerability scanning - Use the specialized skills directly
Remediation guidance - Use remediation-* skills
Full security audits - Use domain auditor agents

Specialized Pattern Skills

`vuln-patterns-core`

Covers: Universal patterns, configuration files, quick scan scripts Languages: All (cross-language patterns) Use when: Scanning any codebase, config audits, hook integration

Includes:

Hardcoded secrets (API keys, AWS keys, private keys)
SQL injection (universal patterns)
Command injection (universal patterns)
Path traversal
Configuration file patterns (.env, Docker)
Quick scan script
Hook integration guidance

`vuln-patterns-languages`

Covers: Language-specific vulnerability patterns Languages: JavaScript/TypeScript, Python, Go, Java, Ruby, PHP Use when: Targeting specific tech stacks, code review

Includes:

JavaScript: eval(), XSS, prototype pollution
Python: pickle, yaml.load, weak crypto
Go: fmt.Sprintf SQL, InsecureSkipVerify
Java: ObjectInputStream, XXE, createStatement
Ruby: backticks, Rails SQL, mass assignment
PHP: unserialize, include, mysql_query

Quick Routing Guide

What You're Looking For	Skill to Use
Hardcoded secrets	`vuln-patterns-core`
SQL injection (any language)	`vuln-patterns-core`
Command injection (any)	`vuln-patterns-core`
Path traversal	`vuln-patterns-core`
Docker/config issues	`vuln-patterns-core`
JavaScript XSS	`vuln-patterns-languages`
Python pickle/yaml	`vuln-patterns-languages`
Java deserialization	`vuln-patterns-languages`
Go TLS issues	`vuln-patterns-languages`
Ruby Rails patterns	`vuln-patterns-languages`
PHP include/require	`vuln-patterns-languages`

Pattern Categories by OWASP

OWASP 2021	Skill	Key Patterns
A01 Access Control	Core + Languages	Path traversal, authorization
A02 Crypto Failures	Languages	MD5, SHA1, weak random
A03 Injection	Core	SQL, command, XSS
A05 Security Misconfig	Core	Debug mode, headers
A07 Auth Failures	Core	Hardcoded credentials
A08 Data Integrity	Languages	Deserialization

Integration

For live security hooks, use vuln-patterns-core which includes:

Hook integration guidance
Pattern matching priorities
False positive mitigation strategies
Quick scan script for rapid detection

vulnerability-patterns