skills.rest
thejefflarson
thejefflarsonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

path-traversal

Detect and remediate directory traversal vulnerabilities across multi-language codebases.

20|Updated Feb 27, 2026
Search Tags:#code review#security#symlinks#canonicalization#path traversal#directory traversal#secure file access
One-click install
npx skills add https://github.com/thejefflarson/soundcheck --skill path-traversal-thejefflarson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: path-traversal
Source: https://github.com/thejefflarson/soundcheck/tree/main/.claude/skills/path-traversal
Command: npx skills add https://github.com/thejefflarson/soundcheck --skill path-traversal-thejefflarson

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Protects against directory traversal attacks where an attacker uses ../ sequences, absolute paths, or symlinks to access files outside the intended directory. Exploitation leads to reading sensitive files like /etc/passwd, .env, private keys, overwriting configuration, or achieving remote code execution via file write.

Core Features & Use Cases

  • Detects common path-traversal patterns across languages (e.g., improper joins, missing containment checks, and symlink handling).
  • Recommends canonicalization and containment checks to block traversal before file operations.
  • Use case: In a web service serving user-uploaded files, identify code paths that could access files outside the root and propose fixes.

Quick Start

Run the path-traversal check on your codebase to locate and remediate unsafe path handling.

Frequently Asked Questions about path-traversal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent directory traversal attacks in my web service?▼

Prevent directory traversal attacks by applying canonical path resolution, strict containment checks against the root directory, and symlink validation before executing any file I/O operations.

What is a path traversal vulnerability and how do ../ sequences exploit it?▼

A path traversal vulnerability occurs when attackers use ../ sequences, absolute paths, or symlinks to access files outside the intended directory, potentially exposing sensitive files like /etc/passwd or .env files.

Does this path traversal check work across multiple programming languages?▼

Yes, this path traversal check works across multi-language codebases including Python, Java, Go, and JavaScript, detecting improper joins, missing containment checks, and unsafe symlink handling.

How do I secure dynamic file access and user-provided file downloads against traversal?▼

Secure dynamic file access by implementing pre-operation validation for all file I/O, requiring canonicalization to resolve paths, and verifying containment against the root before serving user-provided file downloads.

Why is symlink resolution necessary for secure file access in code review?▼

Symlink resolution is necessary for secure file access because attackers can use symlinks to bypass directory containment checks and traverse to sensitive files outside the intended root.

Related Skills

Explore More Software Engineering Skills→
n4igmen4igme

vuln-file-path

Detect file upload and path traversal vulnerabilities in codebases.

Community
Intermediate
ConradmakerConradmaker

dev-security

Identify security risks in application code and document exploit paths with evidence.

Community
Advanced
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-sast

Run static application security testing to detect code-level vulnerabilities in a repository.

Official
Advanced
intrafindintrafind
22

api-security

Validates IDs, language codes, and file paths to prevent API security vulnerabilities.

Official
Advanced