discover-patterns

To extract behavioral anti-patterns from CVEs, use the discover-patterns Skill to analyze OSV.dev data and generalize vulnerabilities into reusable pattern classes like SSRF or path traversal. It structures findings to inform pattern-driven code review tooling.

Generalizing CVE research across npm, PyPI, and Maven requires an ecosystem-agnostic analysis approach. This Skill processes vulnerability data to surface pattern classes such as template options injection and deserialization, mapping them to potential detection rules.

Yes, you can use CWE identifiers to find related behavioral security patterns by passing them to the Skill. It processes the associated CVE research to identify dangerous behavioral patterns and outputs structured guidance and candidate rules for review.

This pattern discovery approach works ecosystem-agnostically across Python, JavaScript, Java, and Go. It analyzes vulnerability data to identify generalized behavioral pattern classes rather than language-specific syntax issues, ensuring broad applicability for security research.

To map discovered CVE patterns to detection rules, the Skill applies a structured scoring framework to the identified behavioral anti-patterns. It outputs candidate rules and guidance that can be used to inform pattern-driven tooling like semgrep.

You should not use CVE pattern discovery when you need language-specific syntax linting rather than generalized behavioral pattern extraction. This Skill focuses on deriving reusable anti-pattern classes from OSV.dev vulnerability data, not scanning custom code directly.