skills.rest
santosomar
santosomarCOMMUNITY
Explore all skills by this author →
Website𝕏@santosomarGitHub

vulnerability-pattern-matcher

Detects banned C/C++ functions, weak crypto, and other dangerous patterns in code.

1|2|Updated Mar 10, 2026
Search Tags:#security#vulnerability#pattern matching#code scanning#codeguard#ban-list
One-click install
npx skills add https://github.com/santosomar/general-secure-coding-agent-skills --skill vulnerability-pattern-matcher-santosomar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-pattern-matcher
Source: https://github.com/santosomar/general-secure-coding-agent-skills/tree/main/skills/security/vulnerability-pattern-matcher
Command: npx skills add https://github.com/santosomar/general-secure-coding-agent-skills --skill vulnerability-pattern-matcher-santosomar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and flag common security vulnerabilities within code by matching against a curated catalog of dangerous patterns, acting as a first line of defense against easily discoverable security weaknesses.

Core Features & Use Cases

  • Pattern Matching: Detects banned C/C++ functions, weak cryptographic practices, hardcoded secrets, and deprecated APIs.
  • Ban-List Enforcement: Useful for enforcing coding standards and security policies in CI/CD pipelines.
  • Use Case: Quickly scan a codebase for instances of strcpy or weak encryption algorithms like MD5 to address potential security risks before deployment.

Quick Start

Use the vulnerability-pattern-matcher skill to scan the current directory for known bad patterns.

Frequently Asked Questions about vulnerability-pattern-matcher

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan code for banned C functions and weak crypto algorithms?▼

You can scan code for banned C functions and weak crypto by matching it against a curated catalog of dangerous patterns. This process flags instances of insecure functions like strcpy and weak algorithms like MD5.

Can I enforce a security ban-list in my CI/CD pipeline?▼

Yes, you can enforce a security ban-list in CI/CD pipelines by applying lexical and syntactic matching against Project CodeGuard's rule set. This proactively identifies low-hanging security fruit before deployment.

What security vulnerabilities can pattern matching detect in my codebase?▼

Pattern matching detects known security vulnerabilities including banned C/C++ functions, weak cryptographic practices, hardcoded credentials, and deprecated APIs during security audits.

Does this code scanning approach work without external dependencies?▼

Yes, this code scanning approach works without external dependencies. It relies entirely on lexical and syntactic matching against Project CodeGuard's rule set to identify dangerous patterns.

What is the best way to find hardcoded secrets and deprecated APIs?▼

The best way to find hardcoded secrets and deprecated APIs is to match your codebase against a catalog of known-dangerous patterns. This flags common security vulnerabilities acting as a first line of defense.

Related Skills

Explore More Software Engineering Skills→
Oruga420Oruga420

configure-ecc

Install and verify Everything Claude Code components into Claude Code directories.

Community
Advanced
Arnutt-NArnutt-N

security-scanner

Detect OWASP Top 10 risks and misconfigurations in HR-IMS code.

Community
Advanced
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced
hubeiqiaohubeiqiao

systematic-debugging

Guide a four-phase debugging process to identify and fix root causes.

Community
Advanced