Summary
- Java 源码文件操作类漏洞审计。当在 Java 白盒审计中需要检测文件相关漏洞时触发。
- 覆盖 5 类文件风险: 任意文件上传(MultipartFile/Servlet Part/类型绕过)、任意文件读取(NIO/IO流/路径穿越)、
- 任意文件写入(覆盖配置/WebShell落地)、归档提取漏洞(ZipInputSt…
wgpsec/aboutsecurity
java-file-audit
Java 源码文件操作类漏洞审计。当在 Java 白盒审计中需要检测文件相关漏洞时触发。 覆盖 5 类文件风险: 任意文件上传(MultipartFile/Servlet Part/类型绕过)、任意文件读取(NIO/IO流/路径穿越)、 任意文件写入(覆盖配置/WebShell落地)、归档提取漏洞(ZipInputStream/Zip Slip)、文件删除/重命名竞争。 需要 java-audit-pipeline 提供的数据流证据。
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
firebase-security-rules-auditor
Similar name
firebase/agent-skills
>- Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege esc…
553 installs
security-audit
Similar name
cloudflare/security-audit-skill
Security audit of a codebase — web apps, APIs, services, CLI tools, libraries, daemons, and mor…
954 installs
firecrawl-seo-audit
Similar name
firecrawl/firecrawl-workflows
Audit a website's SEO with Firecrawl. Use when the user asks for an SEO audit, metadata and hea…
19 installs
firestore-security-rules-auditor
Similar name
firebase/agent-skills
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security r…
20.4K installs
bigquery-pipeline-audit
Similar name
github/awesome-copilot
Audits Python + BigQuery pipelines for cost safety, idempotency, and production readiness. Retu…
8.8K installs
claude-settings-audit
Similar name
getsentry/skills
Analyze a repository to generate recommended Claude Code settings.json permissions. Use when se…
14 installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 17 installs