sc-lang-csharp

Detect C#/.NET security anti-patterns and generate prioritized remediation reports.

56|5|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/ersinkoc/security-check --skill sc-lang-csharp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sc-lang-csharp
Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-lang-csharp
Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-lang-csharp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

C#/.NET applications often suffer from security anti-patterns and misconfigurations that attackers can exploit. This skill detects and highlights common patterns such as BinaryFormatter deserialization risks, unsafe EF raw SQL usage, ViewState tampering, insecure HttpClient usage, and insecure configuration flaws to help secure the .NET stack.

Core Features & Use Cases

  • Detects C#/.NET-specific vulnerability patterns (BinaryFormatter, ASP.NET Core misconfig, EF raw SQL injections, Blazor/SignalR vulnerabilities, and unsafe code risks).
  • Produces actionable remediation guidance and example safer patterns.
  • Use Case: A codebase with several services can be scanned to surface high-risk areas and prioritize fixes for a security backlog.

Quick Start

Scan your C#/.NET project to identify common security anti-patterns and misconfigurations and generate actionable remediation guidance.

Frequently Asked Questions about sc-lang-csharp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan C# code for security vulnerabilities like BinaryFormatter deserialization risks?

To scan C# code for security vulnerabilities, static analysis can identify unsafe BinaryFormatter deserialization patterns and categorize findings against a security checklist to generate a prioritized remediation report with concrete fixes.

What are common ASP.NET Core security anti-patterns and how do I detect them?

Common ASP.NET Core security anti-patterns include insecure HttpClient usage, ViewState tampering, and EF raw SQL injections. Static analysis detects these misconfigurations by referencing a dedicated C# security checklist to surface high-risk areas.

How do I find Entity Framework raw SQL injection vulnerabilities in .NET projects?

Finding Entity Framework raw SQL injection vulnerabilities involves performing static analysis on the .NET project to detect unsafe EF raw SQL usage, which is then reported with actionable remediation guidance and safer example patterns.

Does this static analysis cover Blazor and SignalR security flaws?

Yes, static analysis for .NET security covers Blazor and SignalR vulnerabilities. It scans the entire .NET stack to detect misconfigurations and unsafe code risks, surfacing issues across ASP.NET Core, EF, and related frameworks.

How do I prioritize security fixes for a large C# codebase?

To prioritize security fixes for a large C# codebase, static analysis scans multiple services to surface high-risk areas, categorizing the findings to help prioritize fixes for a security backlog with actionable remediation steps.

What is the best way to check for insecure HttpClient usage in .NET?

The best way to check for insecure HttpClient usage in .NET is using static analysis to identify the anti-pattern, which then generates a prioritized remediation report containing concrete fixes and example safer patterns.