zakirkun Insecure Deserialization
Overview
Detects deserialization of untrusted data which can lead to Remote Code Execution.
Remediation
Use safe data formats like JSON instead of native serialization. If native serialization is required, sign the objects.
Insecure Deserialization
Detects deserialization of untrusted data which can lead to Remote Code Execution.
Insecure Deserialization by zakirkun · ffaa85d
npx skillmds@latest add zakirkun/insecure-deserialization File contents
---name: insecure-deserializationdescription: Detects deserialization of untrusted data which can lead to Remote Code Execution.---# Insecure Deserialization## OverviewDetects deserialization of untrusted data which can lead to Remote Code Execution.## RemediationUse safe data formats like JSON instead of native serialization. If native serialization is required, sign the objects.
zakirkun/ice-tea/tree/main/skills/web/deserialization commit ffaa85df4e
Frequently asked questions
Run npx skillmds@latest add zakirkun/insecure-deserialization in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Detects deserialization of untrusted data which can lead to Remote Code Execution. It is listed under Coding & Dev Tools on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
zakirkun (@zakirkun) published this skill. Their other Agent Skills are listed on their SkillMD profile.