Identify Java/Kotlin security flaws like deserialization and JNDI injection.
npx skills add https://github.com/ersinkoc/security-check --skill sc-lang-java
Please help me install this Agent Skill. Skill: sc-lang-java Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-lang-java Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-lang-java
Java/Kotlin codebases often contain deserialization vulnerabilities, JNDI injection patterns, and other JVM-specific risks that standard scanners miss. This skill provides a focused, in-context security deep scan for the JVM ecosystem.
Run a Java/Kotlin security deep scan across your repository to surface deserialization and injection risks.
High-intent search queries and answers about installing and using this skill.
To scan Java codebases for deserialization and JNDI injection vulnerabilities, you can run a JVM security deep scan that recognizes common gadget chains and injection patterns, then references a security checklist for remediation guidance.
Detecting Spring SpEL abuses and Actuator misconfigurations involves running a targeted JVM security scan that identifies these specific vulnerability patterns across your Spring application configuration and source code.
Yes, this security scan can find XXE vulnerabilities in Java and Kotlin XML parsing by analyzing source code and build outputs to identify unsafe XML parsing patterns and reference remediation best practices.
Yes, the scanner identifies Kotlin interop risks by analyzing the boundaries between Java and Kotlin code, recognizing interop-specific vulnerability patterns during code reviews and security assessments.
This security scan supports Java and Kotlin applications across Spring, Hibernate, and XML parsing frameworks, identifying vulnerability patterns in source code and build outputs.
To remediate JNDI injection and deserialization flaws found during a scan, the tool references a java-security-checklist.md that provides concrete fixes and best practices for your code and configuration.
fatihkanIdentify Java/Kotlin security anti-patterns and vulnerabilities with CWE mappings.
erenisiklarDetect 11 vulnerability patterns in Algorand TEAL/PyTeal smart contracts.
AytsuuAudit source code files, detect third-party libraries, and generate four-level module verdicts.
vertivolatamRun static analysis across multiple programming languages with linters and security scanners.
