sc-path-traversal

Detect path traversal vulnerabilities by scanning your codebase for unsafe file path concatenation, ../ sequences, null byte bypasses, and archive extraction patterns like zip slip. This Skill audits file path handling across Python, Java, and Node.js to surface risky code.

Yes, path traversal detection works with Python, Java, and JavaScript/Node.js code. It identifies unsafe file access patterns and directory traversal sequences across these common environments during code review and runtime security checks.

Directory traversal occurs when user-controlled input constructs file paths to access restricted directories. Null byte injection bypasses sanitization by terminating strings early, and this Skill detects both unsafe path concatenation and null byte manipulation patterns.

Scan code for zip slip and archive extraction vulnerabilities by applying configured path traversal checks to identify risky file path usage. The Skill detects unsafe archive extraction patterns and surfaces vulnerable file handling for remediation.

Yes, you can run directory traversal checks during a CI pipeline or code review. Security analysts can scan codebases with configurable severity levels to surface vulnerable file path usage and initiate remediations.

Automated path traversal detection focuses on identifying unsafe path concatenation, ../ sequences, null byte injections, and zip slip patterns. It applies to Python, Java, and Node.js, but complex logical bypasses may require additional manual security review.