perseus-file

Path traversal vulnerabilities are detected by scanning codebases for unsafe file path resolution operations, identifying where user input reaches file APIs without proper validation, and generating concrete remediation patterns to enforce safe path construction.

XXE attacks exploit XML parsers that process external entity references, and this skill identifies vulnerable parser configurations in your codebase, recommending fixes that disable external entity processing to prevent data exposure and remote code execution.

Prevent zip slip vulnerabilities during archive extraction by validating that all extracted file paths resolve within the intended target directory, and this skill detects unsafe archive extraction logic while providing secure path resolution patterns to block directory traversal.

Yes, this skill applies to web backends and services across multiple programming languages, detecting unsafe file upload implementations and providing language-agnostic remediation patterns with example code snippets for common stacks to prevent code execution.

The best way to remediate insecure file handling is to run a comprehensive scan for path traversal, unsafe uploads, XXE, and archive extraction vulnerabilities, then apply the generated prioritized remediation report enforcing safe coding practices like input validation and proper path resolution.