vuln-patterns-languages

Detect language-specific vulnerabilities in JavaScript, Python, Go, Java, Ruby, and PHP code.

9|2|Updated Dec 5, 2025
One-click install
npx skills add https://github.com/Zate/cc-plugins --skill vuln-patterns-languages
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vuln-patterns-languages
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/vuln-patterns-languages
Command: npx skills add https://github.com/Zate/cc-plugins --skill vuln-patterns-languages

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Language-specific vulnerability patterns tailored to JavaScript, Python, Go, Java, Ruby, and PHP.

Core Features & Use Cases

  • Regex patterns: language-targeted detection patterns.
  • Grep commands: ready-to-run commands for quick checks.
  • Severity guidance: language-specific risk levels.

Quick Start

Run language-specific pattern checks against your codebase to surface risky constructs.

Frequently Asked Questions about vuln-patterns-languages

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect language-specific vulnerabilities in my source code?

Language-specific vulnerability detection uses regex patterns and grep commands tailored to JavaScript, TypeScript, Python, Go, Java, Ruby, and PHP to surface risky constructs. This Skill provides ready-to-run patterns with severity levels, ASVS mappings, and CWE references for targeted scanning across your codebase.

Can I use regex patterns to find security issues in multiple programming languages?

Yes. This Skill supplies language-targeted regex patterns and grep commands for JavaScript, TypeScript, Python, Go, Java, Ruby, and PHP, enabling you to run quick checks and automation across polyglot codebases with per-language detection artifacts.

What severity and compliance mappings are included with vulnerability patterns?

Each pattern includes severity guidance, ASVS mappings, and CWE references to classify risk and support integration into code reviews, auditor workflows, and compliance automation.

How do I run quick vulnerability checks on my codebase without installing tools?

This Skill provides grep commands ready to execute directly against your source, letting you surface language-specific vulnerability patterns immediately without additional tool setup or dependencies.

Can I use vulnerability patterns for automated code review and auditing?

Yes. Patterns are designed for code reviews, targeted scans, and auditor-agent development, with detection artifacts structured to support automation and integration into existing workflows.

What's the difference between using regex patterns versus grep commands for vulnerability detection?

Regex patterns provide flexible matching logic for custom integrations and tooling, while grep commands deliver pre-configured, immediately executable checks for quick manual scans—use both for comprehensive coverage.