sc-path-traversal

Detect path traversal weaknesses in source code and runtime environments.

56|5|Updated Apr 8, 2026

Search Tags:#vulnerability #lfi #rfi #security-scanning #symlink #path-traversal #zip-slip

Ready to run

npx skills add https://github.com/ersinkoc/security-check --skill sc-path-traversal

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sc-path-traversal
Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-path-traversal
Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-path-traversal

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the detection of path traversal and directory traversal vulnerabilities in code and web applications, helping teams reduce exploitable exposure.

Core Features & Use Cases

Pattern-based discovery of traversal vectors like ../ and URL-encoded bypasses across multiple languages.
Data-flow analysis from user input to file system access to reveal insecure paths.
Use Case: Security audits of web apps, APIs, and services to identify LFI, RFI, zip slip, and symlink attacks.

Quick Start

Scan a Python project for path traversal weaknesses and generate a remediation report.

Frequently Asked Questions about sc-path-traversal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect path traversal vulnerabilities in my source code?▼

Detect path traversal vulnerabilities by scanning source code using pattern matching and data-flow analysis to trace user-supplied file paths to file system access, identifying insecure routes and reporting risks across Unix and Windows environments.

What is the best way to scan for LFI, RFI, and zip slip attacks?▼

The best way to scan for LFI, RFI, and zip slip attacks is to perform automated security audits using pattern-based discovery and input normalization checks that identify traversal vectors like ../ and URL-encoded bypasses across multiple languages.

How does data-flow analysis identify directory traversal weaknesses in web applications?▼

Data-flow analysis identifies directory traversal weaknesses by tracking user input from entry points through to file system access, revealing insecure paths and validating safe-path logic to detect exploitable exposure in web apps and APIs.

Can I scan a Python project for symlink and path traversal risks?▼

Yes, you can scan a Python project for symlink and path traversal risks by running automated security scanning that checks user-supplied file paths, validates safe-path handling, and generates a remediation report for detected weaknesses.

Does path traversal detection work across both Unix and Windows file system contexts?▼

Path traversal detection works across both Unix and Windows file system contexts by implementing input normalization checks and pattern matching that account for platform-specific directory separators and web context variations.