{"slug":"jeremylongshore-detecting-insecure-deserialization","source_name":"jeremylongshore/detecting-insecure-deserialization","name":"Jeremylongshore/Detecting Insecure Deserialization","description":"Scan a source tree for unsafe-by-default deserialization APIs:\nPython pickle.loads / cPickle / shelve / dill, Ruby Marshal.load /\nYAML.load (pre-3.1 default), Java ObjectInputStream.readObject,\nPHP unserialize, .NET BinaryFormatter / NetDataContractSerializer,\nNode.js node-serialize, JavaScript JSON.parse with reviver\ncontaining eval.\nUse when: pre-commit gate on services that accept binary blobs,\naudit of legacy job-queue code (workers deserializing tasks),\npost-bug-report when \"we accept user-","version":1,"lift":{"pass_rate_delta_pts":9.09,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":42.6,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-14T11:56:22.554666+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":9.09,"with_pass_pct":86.4,"without_pass_pct":77.3,"tokens_delta_pct":42.6,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-14T11:56:22.554666+00:00","run_id":"d4ad05ae-4032-4d3a-8679-95eed355f69b","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"4d423ca1bdc30be65e5fdfece23b39e6263bc4eac4a626d5cd71892e5425417b","raw_url":"https://app.decimal.ai/s/jeremylongshore-detecting-insecure-deserialization/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/jeremylongshore-detecting-insecure-deserialization"}