jackson-security
From the author
Security considerations for Jackson JSON deserialization, specifically regarding `@JacksonInject` and unintended property overrides.
Install
npx skills add cxcscmu/SkillLearnBench --skill jackson-security -a claude-code
Installs to .claude/skills/jackson-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance64
Maintenance100
Licence100
Adoption34
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- jackson-injection-securitycxcscmu/SkillLearnBenchSecurity considerations for Jackson @JacksonInject - preventing JSON input from overriding injected values, covering CVE patterns and defense strategies.Security★ 91
- jackson-inject-securitycxcscmu/SkillLearnBenchPreventing Jackson @JacksonInject override attacks where JSON input can replace server-side injected values.Security★ 91
- jackson-druid-cvecxcscmu/SkillLearnBenchSecurity and Jackson deserialization issues in Apache Druid, focusing on property bypasses.Security★ 91
- offensive-deserialization26zl/cybersec-toolkitInsecure deserialization attack checklist: identifying deserialization sinks, Java/PHP/.NET/Python deserialization exploitation, ysoserial gadget chains, magic method abuse, and detection evasion. Use when testing deserialization endpoints or developing deserialization exploits. Use only for authorized security research, training, or assessment.Security★ 82
- unit-test-json-serializationgiuseppe-trisciuoglio/developer-kitProvides patterns for unit testing JSON serialization/deserialization with Jackson and `@JsonTest`. Validates JSON mapping, custom serializers, date formats, and polymorphic types. Use when testing JSON serialization, validating custom serializers, or writing JSON unit tests in Spring Boot applications.Testing★ 363
- object-injection-deserializationwpultimatesecurity/WordPress-Security-SkillsUse when code calls unserialize, maybe_unserialize, or stores serialized PHP in options, meta, or transients from untrusted input. Avoids unserialize on attacker-controlled data, prefers json_encode / json_decode, and when unserialize is unavoidable passes ['allowed_classes' => false]. Prevents PHP object injection and POP-chain remote code execution.Engineering★ 53
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in