vuln-patterns-deserialization - Python Deserialization Vulnerability Scanner
Audit Python code for deserialization vulnerabilities by identifying unsafe patterns in pickle, yaml, torch, and other serialization libraries
Tags
Updated: 2026-03-21Capabilities
What this skill does
- search for deserialization function calls
- trace data sources from inputs
- verify security barriers
- identify unsafe deserialization patterns
- check function parameters
- audit data flow paths
Inputs
- Python code files
- user-uploaded model files
- network request bodies
- socket data
- database records
- cached objects
- serialized storage files
Outputs
- deserialization vulnerability findings
- unsafe function call locations
- data source analysis results
- risk assessment report
- false positive exclusion notes
Requirements
- Python code access
- AST parser
- pattern matching engine