skills.rest
RuoJi6RuoJi6Community·4 Agent Skills Included

java-audit-skills

Audit Java, .NET, and PHP code for real security vulnerabilities

Audits Java, .NET, and PHP source code, JARs, and deployment packages for SQL injection, deserialization, and path traversal flaws. Scans dependencies against known CVE rules like Log4Shell and Fastjson, and decompiles or deobfuscates binaries when source is missing. Confirms only exploitable vulnerabilities with safe payloads and BurpSuite-ready request evidence, then delivers a ranked audit report.
1,011|105
↗
npx skills add RuoJi6/java-audit-skills --all -g -y

All Skills in This Repository (4)

Pure Emerald Level Indicators
📦 In Repo
RuoJi6RuoJi6

java-auth-audit

Identify authentication frameworks and map routes to authentication state in Java projects.

Community
Advanced
📦 In Repo
RuoJi6RuoJi6

java-route-mapper

Extract HTTP routes and parameters from Java web projects into Markdown.

Community
Advanced
📦 In Repo
RuoJi6RuoJi6

java-vuln-scanner

Detect known Java component vulnerabilities in Maven, Gradle, or JAR dependencies.

Community
Intermediate
📦 In Repo
RuoJi6RuoJi6

audit-skills

Audit Java, .NET, and PHP source code for vulnerabilities with component scanning and evidence standards.

Community
Advanced

Frequently Asked Questions

FAQPage Schema
How to install java-audit-skills?▼

Run `npx skills add RuoJi6/java-audit-skills --all -g -y` in your terminal to install the audit skill globally for your AI agent.

How to find SQL injection in Java code with AI?▼

Ask your agent to audit the source for SQL injection, and it traces routes, user input, and source-to-sink call chains to confirm only genuinely exploitable flaws.

Can it scan for vulnerable components like Log4j?▼

Yes. A built-in script matches Maven, Gradle, JAR, and WAR dependencies against a YAML rule set covering CVEs like Log4Shell and Fastjson.

Can it audit code without source files?▼

Yes. It decompiles Java JARs with CFR and deobfuscates .NET DLLs with de4dot and ilspycmd before auditing the recovered code.

Is java-audit-skills safe for authorized testing only?▼

Yes. It enforces strict safety boundaries, using only harmless proof payloads and placeholder credentials for defensive, authorized audits.

Related Repositories in Software Engineering

View All in Software Engineering→
openclawopenclaw
388.4k

openclaw

Run a personal AI assistant across your devices and chat apps

Official📦 120 Skills
obraobra
280.0k

superpowers

Gives coding agents a disciplined workflow from idea to merged code

Community📦 15 Skills
facebookfacebook
248.4k

react

AI agent skills for building, testing, and porting React core

Official📦 14 Skills