What is a path traversal vulnerability?

Path traversal, or directory traversal, is a security flaw that allows an attacker to read or write files on the server outside of the intended application directory by using special characters like '../'.

Can I use this for automated security reviews?

Absolutely. It is designed to be triggered during development or audit phases to catch security fundamentals issues before they reach production.

How does the Path Traversal Finder skill work?

The skill uses Claude's analytical capabilities alongside tools like Grep and Bash to scan your codebase for patterns where user input is unsafely concatenated into file paths.

Does this skill provide code fixes?

Yes, it generates production-ready code snippets and configuration updates to implement proper input validation and path normalization.

Path Traversal Finder

Name: Path Traversal Finder
Author: jeremylongshore

byjeremylongshore

•

983

セキュリティとテスト

Identifies and mitigates directory traversal vulnerabilities by scanning source code for insecure file handling patterns.

概要

Path Traversal Finder is a specialized Claude Code skill designed to automate the detection and remediation of path traversal vulnerabilities. By leveraging advanced pattern matching and security best practices, it helps developers secure file system interactions, validate user-provided paths, and implement robust input sanitization. As part of the Security Fundamentals suite, this skill provides actionable guidance to prevent unauthorized file access and ensure compliance with industry-standard secure coding practices.

主な機能

Deep codebase analysis using integrated Grep and Bash tools
Identification of insecure file system APIs and input handling
Automated scanning for path traversal patterns and dot-dot-slash vulnerabilities
Step-by-step remediation guidance based on OWASP standards
Generation of production-ready sanitization and validation code
983 GitHub stars

ユースケース

Refactoring legacy code to implement secure path validation logic
Auditing file upload and download modules for security weaknesses
Training developers on identifying and fixing directory traversal exploits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills path-traversal-finder

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要