What problem does it solve?
C#/.NET applications often suffer from security anti-patterns and misconfigurations that attackers can exploit. This skill detects and highlights common patterns such as BinaryFormatter deserialization risks, unsafe EF raw SQL usage, ViewState tampering, insecure HttpClient usage, and insecure configuration flaws to help secure the .NET stack.
Core Features & Use Cases
- Detects C#/.NET-specific vulnerability patterns (BinaryFormatter, ASP.NET Core misconfig, EF raw SQL injections, Blazor/SignalR vulnerabilities, and unsafe code risks).
- Produces actionable remediation guidance and example safer patterns.
- Use Case: A codebase with several services can be scanned to surface high-risk areas and prioritize fixes for a security backlog.
Quick Start
Scan your C#/.NET project to identify common security anti-patterns and misconfigurations and generate actionable remediation guidance.