Detect file security vulnerabilities and provide remediation patterns for web backends.
npx skills add https://github.com/kaivyy/perseus --skill perseus-file
Please help me install this Agent Skill. Skill: perseus-file Source: https://github.com/kaivyy/perseus/tree/main/skills/perseus/specialists/file-security Command: npx skills add https://github.com/kaivyy/perseus --skill perseus-file
This skill helps identify and remediate file-handling security flaws in a codebase, preventing data exposure and remote code execution through insecure file operations.
Scan your repository for file handling weaknesses and generate a prioritized remediation report.
High-intent search queries and answers about installing and using this skill.
Path traversal vulnerabilities are detected by scanning codebases for unsafe file path resolution operations, identifying where user input reaches file APIs without proper validation, and generating concrete remediation patterns to enforce safe path construction.
XXE attacks exploit XML parsers that process external entity references, and this skill identifies vulnerable parser configurations in your codebase, recommending fixes that disable external entity processing to prevent data exposure and remote code execution.
Prevent zip slip vulnerabilities during archive extraction by validating that all extracted file paths resolve within the intended target directory, and this skill detects unsafe archive extraction logic while providing secure path resolution patterns to block directory traversal.
Yes, this skill applies to web backends and services across multiple programming languages, detecting unsafe file upload implementations and providing language-agnostic remediation patterns with example code snippets for common stacks to prevent code execution.
The best way to remediate insecure file handling is to run a comprehensive scan for path traversal, unsafe uploads, XXE, and archive extraction vulnerabilities, then apply the generated prioritized remediation report enforcing safe coding practices like input validation and proper path resolution.
googleBuild a content-addressed semantic-unit index of symbols, call edges, and function boundaries from source code.
AgentientDetect OWASP Top 10 2021 vulnerabilities in codebases and configurations.
rkmahale17Scan code repositories for secrets, network flaws, and vulnerable dependencies.
Kisilev13Provide security payloads for XSS, SSRF, SQLi, and other web vulnerabilities.
