vulnerability-patterns

Route codebases to vulnerability-pattern detection skills for security scanning.

9|2|Updated Dec 5, 2025
One-click install
npx skills add https://github.com/Zate/cc-plugins --skill vulnerability-patterns
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-patterns
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/vulnerability-patterns
Command: npx skills add https://github.com/Zate/cc-plugins --skill vulnerability-patterns

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

An index of vulnerability detection patterns across multiple categories and OWASP mapping.

Core Features & Use Cases

  • Pattern catalog: hardcoded secrets, injection, traversal, headers, etc.
  • Cross-cutting guidance: usage in live hooks or audits.

Quick Start

Use vulnerability-patterns-core or language-patterns-languages to run patterns against code.

Frequently Asked Questions about vulnerability-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect vulnerability patterns like SQL injection and hardcoded secrets in my codebase?

Vulnerability patterns are detectable code signatures matching OWASP categories—SQL injection, command injection, path traversal, hardcoded secrets, and insecure headers. This Skill routes your codebase to language-specific or universal pattern-detection skills that scan code, configuration files, and deployment hooks to identify these issues.

Can I use vulnerability pattern detection in CI/CD hooks and automated audits?

Yes. Vulnerability pattern detection integrates into live hooks for continuous scanning and manual audits. The Skill provides hook integration guidance and a quick-scan script for rapid pattern detection across deployments, enabling security checks at multiple stages of your pipeline.

What types of security vulnerabilities does pattern-based detection cover?

Pattern-based detection covers hardcoded secrets, SQL injection, command injection, path traversal, insecure headers, and other OWASP-mapped categories. The Skill maintains a catalog of patterns across multiple vulnerability categories applicable to universal code and language-specific checks.

How do I choose between universal vulnerability patterns and language-specific checks?

Universal patterns apply across codebases regardless of language for issues like hardcoded secrets and configuration vulnerabilities. Language-specific checks target syntax and framework-particular weaknesses. The Skill routes you to the appropriate detection skill based on your codebase composition.

Can vulnerability pattern detection work with configuration files and deployment environments?

Yes. Pattern detection scans code, configuration files, and deployment hooks, catching vulnerabilities in environment setup and infrastructure as code alongside application code—enabling comprehensive security coverage across your full stack.