domains / families / security / sast-pathtraversal

sast-pathtraversal

authentic

Detect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic paths), batched verify (trace user input and mitigations in parallel subagents, 3 sinks each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/pathtraversal-results.md. Use when asked to find path traversal, directory traversal, or file disclosure bugs.

When to use

• find path traversal
• directory traversal
• file disclosure bugs
• recon file-loading sinks
• batched verify user input
• merge batch results

When not to use

• SSRF
• RCE via file write
• Static file serving
• Safe path joins followed by realpath + prefix check
• basename() before join

Skill page

Source