skills.rest
Zate
ZateCOMMUNITY
Explore all skills by this author →
GitHub

vuln-patterns-core

Detect vulnerability patterns in code across languages with regex-based scans.

9|2|Updated Dec 5, 2025
Search Tags:#injection#config#secrets#vulnerability patterns
One-click install
npx skills add https://github.com/Zate/cc-plugins --skill vuln-patterns-core
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-patterns-core
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/vuln-patterns-core
Command: npx skills add https://github.com/Zate/cc-plugins --skill vuln-patterns-core

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Universal vulnerability detection patterns applicable across languages, including secrets, injection patterns, and config checks.

Core Features & Use Cases

  • Cross-language detection: universal patterns that apply to many stacks.
  • Config audits: patterns for Docker, env, and config files.
  • Quick hooks: guidance for hook integrations.

Quick Start

Use this core to kick off a vulnerability scan with a universal pattern set.

Frequently Asked Questions about vuln-patterns-core

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect hardcoded secrets and injection vulnerabilities across my codebase?▼

Vulnerability detection uses regex-based patterns to identify hardcoded secrets, SQL injection, command injection, and path traversal flaws across languages. The Skill provides detection patterns, severity classifications, and CWE mappings applicable to multi-language repositories without language-specific tooling.

Can I scan configuration files for security issues in Docker and environment configs?▼

Configuration audits identify vulnerability patterns in Docker, environment, and config files using universal detection rules. The Skill delivers regex patterns and grep command sets to rapidly assess configuration-based risks across your stack.

How do I integrate vulnerability scanning into pre-commit hooks?▼

The Skill provides guidance for hook integrations and a fast scan script enabling rapid vulnerability assessment at commit time. Use the grep-based patterns and severity classifications to gate code changes before they reach your repository.

What vulnerability categories does cross-language pattern detection cover?▼

Patterns cover hardcoded secrets, SQL and command injection, path traversal, and configuration file vulnerabilities. Each pattern includes severity classifications and ASVS and CWE mappings to standardize vulnerability assessment across languages.

Can I use these patterns for security scanning on existing repositories?▼

Yes. The universal pattern set applies to multi-language repositories for rapid assessment without dependency installation. Run the included scan script to quickly identify injection patterns, secrets, and config risks across your codebase.

Do I need language-specific tools to detect injection patterns with these rules?▼

No. The regex-based patterns work universally across languages, eliminating the need for separate tooling per stack. The Skill provides grep command sets and a fast scan script for immediate deployment to any codebase.

Related Skills

Explore More Software Engineering Skills→
UnicornUnicorn

vulnerability-scan-agent

Scan code, dependencies, and configurations for known security vulnerabilities.

Official
Advanced
mahg-esmahg-es
3

secure-code

Review source code for security vulnerabilities with CWE mappings and concrete fixes.

Official
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced
HouseGarofaloHouseGarofalo
3

security-scanner

Scan container images, dependencies, and IaC for security vulnerabilities.

Official
Advanced