Dangerous Functions
CommunityIdentify security sinks across 9 languages.
Authorallsmog
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This skill helps identify potentially dangerous functions (sinks) in source code, which are common entry points for vulnerabilities during whitebox penetration testing.
Core Features & Use Cases
- Language-Specific Sinks: Provides lists of dangerous functions for 9 different programming languages (PHP, Java, Python, JavaScript, .NET, Go, Ruby, Rust, Swift, Kotlin, Solidity).
- Vulnerability Identification: Aids in finding command injection, SQL injection, deserialization, and other critical vulnerabilities.
- Use Case: When reviewing a Python codebase, you can use this skill to quickly find all instances of
os.system()orsubprocess.run()that might be vulnerable to command injection.
Quick Start
Find all dangerous functions in the provided Python code files.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: Dangerous Functions Download link: https://github.com/allsmog/vuln-scout/archive/main.zip#dangerous-functions Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.