codegen-literal-security-scan Skill
Detect and remediate code-generation literal injection risks in Kiota writer code (wire names, serialization names, URL templates, base URLs, defaults, and path parameter keys). Published by microsoft in kiota.
Decision snapshot
Is this a fit?
Security review, Documentation, Data analysis, Includes SKILL.md
Compatibility not yet detected.
Permission behavior not yet detected.
Copy skill directory
2 months ago · MIT license
No specific cautions were detected. Review the source and requested permissions before installing.
What is codegen-literal-security-scan Skill?
Detect and remediate code-generation literal injection risks in Kiota writer code (wire names, serialization names, URL templates, base URLs, defaults, and path parameter keys). Published by microsoft in kiota. This profile combines repository metadata with install, compatibility, and usage signals so developers can quickly decide whether it fits their agent workflow before opening the source repository.
Automated repository signals based on public metadata such as recency, license, installation evidence, and adoption. These are not a security audit or endorsement. See how SkillIndex evaluates profiles.
Key capabilities
- Includes SKILL.md support
- Reusable instructions support
- Security review
- Documentation
- Data analysis
- Security review use cases
- Documentation use cases
Declared skill metadata
- Source file: .github/skills/codegen-literal-security-scan/SKILL.md
These fields retain source and confidence evidence from the indexed SKILL.md.
Compatibility and setup
- Install or run with Copy skill directory
When to use codegen-literal-security-scan Skill
- Use it for security review.
- Use it for documentation.
- Use it for data analysis.
Built with
Editorial notes
Source
- Creator: microsoft
- Repository: microsoft/kiota
- Skill file: .github/skills/codegen-literal-security-scan/SKILL.md
What it does
Detect and remediate code-generation literal injection risks in Kiota writer code (wire names, serialization names, URL templates, base URLs, defaults, and path parameter keys).
Skill instructions
Use this skill when auditing or modifying any code generator writer logic. Goal Prevent generated-source injection (including potential RCE chains) by ensuring every untrusted schema-derived value is escaped for the destination literal context before being emitted. Focus surfaces (expanded) Prioritize all literal-emission paths under src/Kiota.Builder/Writers//.cs, especially: - WireName, SerializationName, IndexParameter.SerializationName - UrlTemplateOverride, URI template constants, base URL defaults - DefaultValue (constructor assignments, getter fallback values, parameter signatures) - Path/query parameter assignment keys in convention helpers - Query parameters mapper constants and metadata constants - Enum wire values and enum member attributes - Property annotations/attributes that carry serialized names - Backing store keys for custom/additional-data properties - Documentation long/short comments that interpolate external links/labels Required checks 1. Locate candidate sinks:
Verified compatibility and discovery
Frequently asked questions
What is codegen-literal-security-scan?
codegen-literal-security-scan is a open-source AI agent skill with Copy skill directory. Detect and remediate code-generation literal injection risks in Kiota writer code (wire names, serialization names, URL templates, base URLs, defaults, and path parameter keys).
Who is codegen-literal-security-scan best for?
codegen-literal-security-scan is best for reusing agent instructions, scripts, and references, security review workflows, documentation workflows, data analysis workflows.
How do I install codegen-literal-security-scan?
Install or run codegen-literal-security-scan using Copy skill directory. Check codegen-literal-security-scan for the latest setup command.
Is codegen-literal-security-scan actively maintained?
codegen-literal-security-scan may need a closer maintenance check before production use.
Project health auto-fetched from the source repository.
Maintain this resource?
Review this source-backed profile, send a correction with evidence, or link to it from your documentation. Claims verify your relationship to the project; profile facts still require source evidence and editorial review.
