vuln-patterns-languages

Detect language-specific vulnerabilities in JavaScript, Python, Go, Java, Ruby, and PHP code.

9|2|Updated Dec 5, 2025
One-click install
npx skills add https://github.com/Zate/cc-plugins --skill vuln-patterns-languages
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-patterns-languages
Source: https://github.com/Zate/cc-plugins/tree/main/plugins/security/skills/vuln-patterns-languages
Command: npx skills add https://github.com/Zate/cc-plugins --skill vuln-patterns-languages

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Language-specific vulnerability patterns tailored to JavaScript, Python, Go, Java, Ruby, and PHP.

Core Features & Use Cases

  • Regex patterns: language-targeted detection patterns.
  • Grep commands: ready-to-run commands for quick checks.
  • Severity guidance: language-specific risk levels.

Quick Start

Run language-specific pattern checks against your codebase to surface risky constructs.

Frequently Asked Questions about vuln-patterns-languages

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect language-specific vulnerabilities in my source code?▼

Language-specific vulnerability detection uses regex patterns and grep commands tailored to JavaScript, TypeScript, Python, Go, Java, Ruby, and PHP to surface risky constructs. This Skill provides ready-to-run patterns with severity levels, ASVS mappings, and CWE references for targeted scanning across your codebase.

Can I use regex patterns to find security issues in multiple programming languages?▼

Yes. This Skill supplies language-targeted regex patterns and grep commands for JavaScript, TypeScript, Python, Go, Java, Ruby, and PHP, enabling you to run quick checks and automation across polyglot codebases with per-language detection artifacts.

What severity and compliance mappings are included with vulnerability patterns?▼

Each pattern includes severity guidance, ASVS mappings, and CWE references to classify risk and support integration into code reviews, auditor workflows, and compliance automation.

How do I run quick vulnerability checks on my codebase without installing tools?▼

This Skill provides grep commands ready to execute directly against your source, letting you surface language-specific vulnerability patterns immediately without additional tool setup or dependencies.

Can I use vulnerability patterns for automated code review and auditing?▼

Yes. Patterns are designed for code reviews, targeted scans, and auditor-agent development, with detection artifacts structured to support automation and integration into existing workflows.

What's the difference between using regex patterns versus grep commands for vulnerability detection?▼

Regex patterns provide flexible matching logic for custom integrations and tooling, while grep commands deliver pre-configured, immediately executable checks for quick manual scans—use both for comprehensive coverage.