How does this skill help with path traversal?

It provides specific patterns to resolve and validate file paths using libraries like pathlib or path.resolve to ensure user input cannot escape allowed directories.

Is this skill used for detecting vulnerabilities?

No, this skill is for fixing issues once they are known. For detection, use the vulnerability-patterns skill.

Does it include security header recommendations?

Yes, it covers essential headers like Content-Security-Policy (CSP), HSTS, X-Frame-Options, and Referrer-Policy with recommended production values.

Can this skill fix injection vulnerabilities?

No, this skill focuses on configuration and deployment. You should use the remediation-injection skill for SQL, Command, or other injection issues.

Which frameworks and languages are supported?

It includes remediation examples for Python (Flask/Django), Node.js (Express), Go, Java (Spring Boot), and Nginx server configurations.

Remediation Configuration Security

Name: Remediation Configuration Security
Author: Zate

byZate

安全与测试

Provides actionable security fix patterns for configuration and deployment vulnerabilities across multiple programming languages.

关于

This skill equips Claude with specialized knowledge for remediating common configuration-based security risks such as path traversal, exposed debug modes, and missing security headers. It provides production-ready, language-specific implementations for Python, Node.js, Go, and Java, alongside server-level configurations for Nginx. By following patterns mapped to OWASP and ASVS standards, it helps developers transition from vulnerable code to secure, hardened production environments during the development and code review process.

主要功能

Cross-language path traversal protection patterns
Standardized security header implementation (CSP, HSTS, etc.)
Mapping to OWASP and ASVS security standards
Environment-aware debug mode configuration
Language-specific secure code snippets for major frameworks
0 GitHub stars

使用场景

Implementing comprehensive security headers using middleware like Helmet or Talisman
Remediating directory traversal vulnerabilities found during security audits
Disabling verbose error reporting and debug features in production environments

关于

主要功能

Cross-language path traversal protection patterns
Standardized security header implementation (CSP, HSTS, etc.)
Mapping to OWASP and ASVS security standards
Environment-aware debug mode configuration
Language-specific secure code snippets for major frameworks
0 GitHub stars

使用场景

Implementing comprehensive security headers using middleware like Helmet or Talisman
Remediating directory traversal vulnerabilities found during security audits
Disabling verbose error reporting and debug features in production environments