vulnerability-patterns

Name: vulnerability-patterns
Availability: InStock
Author: Zate

Route codebases to vulnerability-pattern detection skills for security scanning.

9|2|Updated Dec 5, 2025

Search Tags:#OWASP #patterns #vulnerability patterns

Ready to run

npx skills add https://github.com/Zate/cc-plugins --skill vulnerability-patterns

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-patterns
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/vulnerability-patterns
Command: npx skills add https://github.com/Zate/cc-plugins --skill vulnerability-patterns

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

An index of vulnerability detection patterns across multiple categories and OWASP mapping.

Core Features & Use Cases

Pattern catalog: hardcoded secrets, injection, traversal, headers, etc.
Cross-cutting guidance: usage in live hooks or audits.

Quick Start

Use vulnerability-patterns-core or language-patterns-languages to run patterns against code.

Frequently Asked Questions about vulnerability-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect vulnerability patterns like SQL injection and hardcoded secrets in my codebase?▼

Vulnerability patterns are detectable code signatures matching OWASP categories—SQL injection, command injection, path traversal, hardcoded secrets, and insecure headers. This Skill routes your codebase to language-specific or universal pattern-detection skills that scan code, configuration files, and deployment hooks to identify these issues.

Can I use vulnerability pattern detection in CI/CD hooks and automated audits?▼

Yes. Vulnerability pattern detection integrates into live hooks for continuous scanning and manual audits. The Skill provides hook integration guidance and a quick-scan script for rapid pattern detection across deployments, enabling security checks at multiple stages of your pipeline.

What types of security vulnerabilities does pattern-based detection cover?▼

Pattern-based detection covers hardcoded secrets, SQL injection, command injection, path traversal, insecure headers, and other OWASP-mapped categories. The Skill maintains a catalog of patterns across multiple vulnerability categories applicable to universal code and language-specific checks.

How do I choose between universal vulnerability patterns and language-specific checks?▼

Universal patterns apply across codebases regardless of language for issues like hardcoded secrets and configuration vulnerabilities. Language-specific checks target syntax and framework-particular weaknesses. The Skill routes you to the appropriate detection skill based on your codebase composition.

Can vulnerability pattern detection work with configuration files and deployment environments?▼

Yes. Pattern detection scans code, configuration files, and deployment hooks, catching vulnerabilities in environment setup and infrastructure as code alongside application code—enabling comprehensive security coverage across your full stack.