Trace user input to eval/exec functions across multi-language codebases.
npx skills add https://github.com/fatihkan/badi --skill sc-rce-fatihkan
Please help me install this Agent Skill. Skill: sc-rce Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-rce Command: npx skills add https://github.com/fatihkan/badi --skill sc-rce-fatihkan
Detects and mitigates remote code execution vulnerabilities caused by user-controlled input reaching eval/exec-like functions.
Run the detector against your codebase or logs to identify RCE vectors and generate actionable findings.
High-intent search queries and answers about installing and using this skill.
To detect remote code execution vulnerabilities, this tool traces data-flow from user input sources to dynamic code evaluation points like eval and exec. It scans multi-language codebases to identify RCE vectors and generates structured findings with severity classification and remediation guidance.
Remote code execution data-flow tracing tracks how user-controlled input travels through an application to reach dynamic code evaluation functions. This mechanism maps the execution path from external sources to dangerous sinks, enabling precise risk assessment and identification of exploitable code injection vectors.
Yes, you can scan for eval and exec vulnerabilities across different programming languages. The detector applies phase-based detection to multi-language codebases, scanning Python, JavaScript, PHP, Java, C#, Go, and Ruby to find dynamic code loading and execution vectors.
Yes, this remote code execution scanner works for web apps and build tools. It applies phase-based detection and data-flow tracing across web apps, services, and build tool configurations to identify dynamic code evaluation points vulnerable to user input injection.
To get remediation guidance after finding an RCE vector, run the detector against your codebase to generate actionable findings. The output provides structured results with severity classification and specific remediation steps to mitigate the identified code injection risks.
n4igmeDetect SQL, command, SSTI, XSS, and NoSQL injection vulnerabilities in web and API code.
ElbertePlinioAnalyze commits, pull requests, and branch diffs for security vulnerabilities.
MAF2414Trace user-controlled input from sources to dangerous sinks to detect injection vulnerabilities.
nashgaoAutomate code formatting and style enforcement across multiple programming languages.
