Are the fixes compliant with industry standards?

Yes, the remediation patterns are aligned with OWASP Top 10 guidelines and Application Security Verification Standard (ASVS) requirements.

How does it help with React security?

It includes specific patterns for React's rendering behavior, covering safe link handling and the proper use of sanitization libraries like DOMPurify when rendering HTML.

Which programming languages are supported?

It provides secure code examples for Python, JavaScript/TypeScript (Node.js/React), Java (JDBC/JPA), and Go.

Can it help me with database-specific injections?

Yes, it provides examples for common database drivers and ORMs including SQLAlchemy, Prisma, Knex.js, and standard SQL drivers for Go and Java.

Does this skill detect vulnerabilities in my code?

No, this skill is specifically designed for remediation. To detect vulnerabilities, you should use a companion skill such as 'vulnerability-patterns'.

Remediation: Injection Vulnerabilities

Name: Remediation: Injection Vulnerabilities
Author: Zate

byZate

セキュリティとテスト

Provides actionable code patterns and best practices to fix SQL injection, command injection, and cross-site scripting (XSS) across multiple programming languages.

概要

The Remediation: Injection Vulnerabilities skill equips Claude with specialized knowledge to resolve critical security flaws. It offers language-specific 'Before' and 'After' code examples for Python, JavaScript, Java, and Go, covering modern frameworks and ORMs like SQLAlchemy, Prisma, and Hibernate. This skill is ideal for developers fixing vulnerabilities found during security audits or for improving code quality during reviews, ensuring all implementations align with OWASP standards and Application Security Verification Standard (ASVS) requirements.

主な機能

Multi-language remediation patterns for Python, JS/TS, Java, and Go
Safe OS command execution patterns using argument arrays instead of shells
Direct references to OWASP and ASVS security standards
Secure SQL implementation using parameterized queries and ORMs
XSS prevention through auto-escaping, sanitization, and DOMPurify
0 GitHub stars

ユースケース

Replacing unsafe shell command executions with secure subprocess argument lists
Refactoring vulnerable SQL queries into secure parameterized statements after an audit
Implementing proper output encoding and sanitization to prevent XSS in web applications