SkillsAdd

ruoji6/audit-skills

java-deserialization-audit

Java 反序列化漏洞深度审计。用户要求分析 DESERIALIZE sink、ObjectInputStream/readObject、XMLDecoder、Fastjson、XStream、JDBC 反序列化、Shiro RememberMe、Log4j/JNDI 或 gadget 链可利用性时触发；纯组件…

First seen Jun 10, 2026

Installation

$ npx skills add https://github.com/ruoji6/audit-skills
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

deserialization-insecure Similar name
yaklang/hack-skills

>- Insecure deserialization playbook. Use when Java, PHP, or Python applications deserialize un…

2.9K installs
exploiting-insecure-deserialization Similar name
mukul975/anthropic-cybersecurity-skills

Identifying and exploiting insecure deserialization vulnerabilities in Java, PHP, Python, and .…

215 installs
hunt-deserialization Similar name
elementalsouls/claude-bughunter

Hunt Insecure Deserialization — Java gadget chains (ysoserial), PHP object injection (phpggc), …

136 installs

Also in this package

Other skills from ruoji6/audit-skills · top by installs.

npx skills add https://github.com/ruoji6/audit-skills
java-sql-audit 60 java-xxe-audit 58 java-file-upload-audit 58 java-route-tracer 57 java-file-read-audit 57 java-vuln-scanner 55 java-route-mapper 54 java-auth-audit 54 java-audit-pipeline 53 audit-skills 28

Browse all from ruoji6/audit-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.0K
Default branch main
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 4 installs