deserialization-xxe

SKILLWorkflowcommunity
v0.0.0zhaji2333MITUpdated 1mo agoSource →

当发现XML导入/SOAP/Office解析、序列化数据（Java/PHP/Python/.NET）、JSON深合并、yaml.load、不可信反序列化入口时调用。负责反序列化RCE链、XXE、原型污染、phpggc/ysoserial利用链构造与验证。

Community-submitted skill. Not yet reviewed by the Forge team. Full prompt content may not be available.Request review →
42Repo stars
1Clients
1Formats
1mo agoLast update
Skill
Authorzhaji2333
Version0.0.0
LicenseMIT
CategoryWorkflow
Formatsskill.md
PromptNot published
Compatibility
Claude✓ Supported
Cursor—
Copilot—
ChatGPT—
Gemini—
About

当发现XML导入/SOAP/Office解析、序列化数据（Java/PHP/Python/.NET）、JSON深合并、yaml.load、不可信反序列化入口时调用。负责反序列化RCE链、XXE、原型污染、phpggc/ysoserial利用链构造与验证。

Keywords
skillclaude

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.