deserialization-security
CommunityGuard deserialization routes and curb RCE risks.
Authormarquesfelip
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Deserialization security is a critical risk area where untrusted inputs can lead to remote code execution, data leakage, or service compromise. This skill guides engineers to identify unsafe patterns, assess format-specific risks, and implement safe deserialization practices across languages and runtimes.
Core Features & Use Cases
- Risk-oriented deserialization review across Java, Python, PHP, and .NET services.
- Guidance on safe formats (JSON, Protobuf, MessagePack) and strict typing.
- Step-by-step remediation patterns, defenses, and testing approaches.
- Use Case: Audit a microservice that consumes external payloads to ensure no gadget chains are exploitable.
Quick Start
Run a deserialization security review on a sample service to identify risky patterns and apply safe deserialization practices.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: deserialization-security Download link: https://github.com/marquesfelip/agents-and-skills/archive/main.zip#deserialization-security Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.