Vulnerability Patterns
This skill is an index to modular detection pattern skills. Use the specialized skills for focused scanning.
When to Use This Skill
- Finding the right pattern skill - Use this index to route appropriately
- Overview of detection capabilities - Quick reference of what's available
When NOT to Use This Skill
- Actual vulnerability scanning - Use the specialized skills directly
- Remediation guidance - Use remediation-* skills
- Full security audits - Use domain auditor agents
Specialized Pattern Skills
vuln-patterns-core
Covers: Universal patterns, configuration files, quick scan scripts
Languages: All (cross-language patterns)
Use when: Scanning any codebase, config audits, hook integration
Includes:
- Hardcoded secrets (API keys, AWS keys, private keys)
- SQL injection (universal patterns)
- Command injection (universal patterns)
- Path traversal
- Configuration file patterns (.env, Docker)
- Quick scan script
- Hook integration guidance
vuln-patterns-languages
Covers: Language-specific vulnerability patterns
Languages: JavaScript/TypeScript, Python, Go, Java, Ruby, PHP
Use when: Targeting specific tech stacks, code review
Includes:
- JavaScript: eval(), XSS, prototype pollution
- Python: pickle, yaml.load, weak crypto
- Go: fmt.Sprintf SQL, InsecureSkipVerify
- Java: ObjectInputStream, XXE, createStatement
- Ruby: backticks, Rails SQL, mass assignment
- PHP: unserialize, include, mysql_query
Quick Routing Guide
| What You're Looking For |
Skill to Use |
| Hardcoded secrets |
vuln-patterns-core |
| SQL injection (any language) |
vuln-patterns-core |
| Command injection (any) |
vuln-patterns-core |
| Path traversal |
vuln-patterns-core |
| Docker/config issues |
vuln-patterns-core |
| JavaScript XSS |
vuln-patterns-languages |
| Python pickle/yaml |
vuln-patterns-languages |
| Java deserialization |
vuln-patterns-languages |
| Go TLS issues |
vuln-patterns-languages |
| Ruby Rails patterns |
vuln-patterns-languages |
| PHP include/require |
vuln-patterns-languages |
Pattern Categories by OWASP
| OWASP 2021 |
Skill |
Key Patterns |
| A01 Access Control |
Core + Languages |
Path traversal, authorization |
| A02 Crypto Failures |
Languages |
MD5, SHA1, weak random |
| A03 Injection |
Core |
SQL, command, XSS |
| A05 Security Misconfig |
Core |
Debug mode, headers |
| A07 Auth Failures |
Core |
Hardcoded credentials |
| A08 Data Integrity |
Languages |
Deserialization |
Integration
For live security hooks, use vuln-patterns-core which includes:
- Hook integration guidance
- Pattern matching priorities
- False positive mitigation strategies
- Quick scan script for rapid detection
See Also
asvs-requirements - Full ASVS requirement detailsremediation-library - Index to fix patternsremediation-injection - Injection fixesremediation-crypto - Cryptography fixes
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: vulnerability-patterns3description: Index of vulnerability detection pattern skills. Routes to core patterns (universal) and language-specific patterns for security scanning. Use when this capability is needed.4---56# Vulnerability Patterns78This skill is an index to modular detection pattern skills. Use the specialized skills for focused scanning.910## When to Use This Skill1112- **Finding the right pattern skill** - Use this index to route appropriately13- **Overview of detection capabilities** - Quick reference of what's available1415## When NOT to Use This Skill1617- **Actual vulnerability scanning** - Use the specialized skills directly18- **Remediation guidance** - Use remediation-* skills19- **Full security audits** - Use domain auditor agents2021---2223## Specialized Pattern Skills2425### `vuln-patterns-core`26**Covers**: Universal patterns, configuration files, quick scan scripts27**Languages**: All (cross-language patterns)28**Use when**: Scanning any codebase, config audits, hook integration2930Includes:31- Hardcoded secrets (API keys, AWS keys, private keys)32- SQL injection (universal patterns)33- Command injection (universal patterns)34- Path traversal35- Configuration file patterns (.env, Docker)36- Quick scan script37- Hook integration guidance3839### `vuln-patterns-languages`40**Covers**: Language-specific vulnerability patterns41**Languages**: JavaScript/TypeScript, Python, Go, Java, Ruby, PHP42**Use when**: Targeting specific tech stacks, code review4344Includes:45- JavaScript: eval(), XSS, prototype pollution46- Python: pickle, yaml.load, weak crypto47- Go: fmt.Sprintf SQL, InsecureSkipVerify48- Java: ObjectInputStream, XXE, createStatement49- Ruby: backticks, Rails SQL, mass assignment50- PHP: unserialize, include, mysql_query5152---5354## Quick Routing Guide5556| What You're Looking For | Skill to Use |57|-------------------------|--------------|58| Hardcoded secrets | `vuln-patterns-core` |59| SQL injection (any language) | `vuln-patterns-core` |60| Command injection (any) | `vuln-patterns-core` |61| Path traversal | `vuln-patterns-core` |62| Docker/config issues | `vuln-patterns-core` |63| JavaScript XSS | `vuln-patterns-languages` |64| Python pickle/yaml | `vuln-patterns-languages` |65| Java deserialization | `vuln-patterns-languages` |66| Go TLS issues | `vuln-patterns-languages` |67| Ruby Rails patterns | `vuln-patterns-languages` |68| PHP include/require | `vuln-patterns-languages` |6970---7172## Pattern Categories by OWASP7374| OWASP 2021 | Skill | Key Patterns |75|------------|-------|--------------|76| A01 Access Control | Core + Languages | Path traversal, authorization |77| A02 Crypto Failures | Languages | MD5, SHA1, weak random |78| A03 Injection | Core | SQL, command, XSS |79| A05 Security Misconfig | Core | Debug mode, headers |80| A07 Auth Failures | Core | Hardcoded credentials |81| A08 Data Integrity | Languages | Deserialization |8283---8485## Integration8687For live security hooks, use `vuln-patterns-core` which includes:88- Hook integration guidance89- Pattern matching priorities90- False positive mitigation strategies91- Quick scan script for rapid detection9293---9495## See Also9697- `asvs-requirements` - Full ASVS requirement details98- `remediation-library` - Index to fix patterns99- `remediation-injection` - Injection fixes100- `remediation-crypto` - Cryptography fixes101102---103> Converted and distributed by [TomeVault](https://tomevault.io/claim/zate) — claim your Tome and manage your conversions.104<!-- tomevault:4.0:skill_md:2026-04-12 -->
tomevault-io