Trace data flow from user input to dynamic code evaluation functions across seven languages.
npx skills add https://github.com/ersinkoc/security-check --skill sc-rce
Please help me install this Agent Skill. Skill: sc-rce Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-rce Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-rce
Remote code execution vectors are a critical class of security vulnerabilities where user-controlled input reaches dynamic code evaluation functions, enabling attackers to execute arbitrary code on a host.
Run the sc-rce skill against a codebase containing dynamic code evaluation patterns to identify exploitable RCE vectors
High-intent search queries and answers about installing and using this skill.
Detect remote code execution by tracing user-controlled input data flow to dynamic code evaluation functions across Python, JavaScript, PHP, Java, C#, Go, and Ruby, generating structured findings with severity and remediation guidance.
Remote code execution occurs when user-controlled input reaches dynamic code evaluation functions like eval or exec, enabling attackers to execute arbitrary code on the host system through exploited input vectors.
RCE detection checks language-specific patterns including eval, Function, vm.runInNewContext for JavaScript, ScriptEngine for C#, and equivalent dynamic code evaluation calls across Python, PHP, Java, Go, and Ruby.
Scan for dynamic code execution vulnerabilities by running detection logic against the target codebase to trace data flow from input sources to execution points, producing structured findings with CWE references and remediation guidance.
Yes, RCE detection supports multi-language codebases including Python and JavaScript, applying language-specific pattern detection to trace user-controlled input to dynamic evaluation functions across all seven supported languages.
Remote code execution findings are generated in a consistent structured format that includes severity classification, CWE references, and remediation guidance for each identified vulnerability across all supported languages.
fatihkanTrace user input to eval/exec functions across multi-language codebases.
GDSDNScan codebases for predefined vulnerability patterns and generate severity reports.
florianbuetowMap application entry points and rank their network exposure and exploitability.
bpnrockstarAutomate detection, enumeration, and exploitation simulation of RCE vulnerabilities in web applications.
