apache-druid-security
From the author
Security patching for Apache Druid - covers JavaScript execution vulnerabilities, sampler endpoint protection, and filter validation patterns.
Install
npx skills add cxcscmu/SkillLearnBench --skill apache-druid-security -a claude-code
Installs to .claude/skills/apache-druid-security/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Download .zip
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 83
Security100
Provenance64
Maintenance100
Licence100
Adoption34
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- druid-javascript-securitycxcscmu/SkillLearnBenchSecuring Apache Druid's JavaScript execution engine against code injection and security bypass attacks.Security★ 91
- druid-js-vulnerabilitycxcscmu/SkillLearnBenchPatching Apache Druid JavaScript injection vulnerability (CVE-2021-25646). Use this skill when fixing Druid's JavaScript execution bypass where empty JSON keys override @JacksonInject JavaScriptConfig to enable JavaScript execution despite being disabled server-wide.Security★ 91
- evo-druid-cve-patchOpenLAIR/OpenSkillPatches Apache Druid 0.20.0 for CVE-2021-25646 - a JavaScript injection vulnerability where empty-string keys in JSON payloads can override server-side JavaScriptConfig to enable arbitrary code exe...Security★ 97
- jackson-druid-cvecxcscmu/SkillLearnBenchSecurity and Jackson deserialization issues in Apache Druid, focusing on property bypasses.Security★ 91
- druid-javascript-rcecxcscmu/SkillLearnBenchApache Druid JavaScript RCE vulnerability (CVE-2021-25646) fix via @JacksonInject hardening and constructor validation.Security★ 91
- security-patch-advisorArabelaTso/Skills-4-SEProposes secure remediation strategies for detected security vulnerabilities including buffer overflows, injection risks, insecure deserialization, improper authentication, and unsafe cryptographic usage. Provides recommended security checks, safer API alternatives, design-level changes, code examples, trade-off analysis, and prioritized remediation plans. Does NOT automatically modify code unless explicitly requested.Security★ 259
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in