sc-lang-java
25Skill Claude CodeCodex
Java/Kotlin-specific security deep scan.
Skill Claude CodeCodex
Java/Kotlin-specific security deep scan.
Skill Claude CodeCodex
PHP-specific security deep scan.
Skill Claude CodeCodex
Python-specific security deep scan.
Skill Claude CodeCodex
Rust-specific security deep scan.
Skill Claude CodeCodex
TypeScript/JavaScript-specific security deep scan.
Skill Claude CodeCodex
LDAP Injection detection in search filters, DN construction, and bind operations.
Skill Claude CodeCodex
Mass assignment and over-posting detection — unfiltered request body binding to data models.
Skill Claude CodeCodex
NoSQL Injection detection for MongoDB, Redis, CouchDB, and Elasticsearch.
Skill Claude CodeCodex
Open redirect detection — unvalidated redirect URLs, protocol-relative bypasses, and URI scheme abuse.
Skill Claude CodeCodex
Master orchestration skill that coordinates the entire 4-phase security scanning pipeline.
Skill Claude CodeCodex
Path traversal and directory traversal detection — LFI, RFI, zip slip, and symlink attacks.
Skill Claude CodeCodex
Privilege escalation vector detection — role manipulation, admin bypass, and RBAC circumvention.
Skill Claude CodeCodex
Race condition and TOCTOU detection — database races, file system races, double-spend, and atomicity failures.
Skill Claude CodeCodex
Missing rate limiting and application-level DoS vector detection — ReDoS, query complexity, resource exhaustion.
Skill Claude CodeCodex
Remote Code Execution detection via eval, exec, dynamic code loading, and code injection vectors.
Skill Claude CodeCodex
Codebase discovery and architecture mapping for security analysis.
Skill Claude CodeCodex
Final consolidated security assessment report generator with CVSS severity and remediation roadmap.
Skill Claude CodeCodex
Hardcoded secrets, API keys, tokens, credentials, and private key detection in source code.
Skill Claude CodeCodex
Session management flaw detection — fixation, hijacking, cookie misconfiguration, and lifecycle issues.
Skill Claude CodeCodex
SQL Injection detection across all variants — classic, blind, time-based, second-order, and UNION-based.
Skill Claude CodeCodex
Server-Side Request Forgery detection — URL fetching with user input, DNS rebinding, cloud metadata access.
Skill Claude CodeCodex
Server-Side Template Injection detection across all major template engines.
Skill Claude CodeCodex
False positive elimination and confidence scoring for all security findings.
Skill Claude CodeCodex
WebSocket security flaw detection — missing origin validation, authentication bypass, and message injection.