{"slug":"utkusen-sast-pathtraversal","source_name":"utkusen/sast-pathtraversal","name":"Utkusen/Sast Pathtraversal","description":"Detect path traversal vulnerabilities in a codebase using a three-phase approach: recon (find file-loading sinks with dynamic paths), batched verify (trace user input and mitigations in parallel subagents, 3 sinks each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/pathtraversal-results.md. Use when asked to find path traversal, directory traversal, or file disclosure bugs.","version":1,"lift":{"pass_rate_delta_pts":18.18,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":317.4,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-14T13:11:30.692815+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":18.18,"with_pass_pct":86.4,"without_pass_pct":68.2,"tokens_delta_pct":317.4,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-14T13:11:30.692815+00:00","run_id":"6166406c-b97c-4759-8a5a-000b1525a0cb","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"c502e9cb151c27dfbfcfaae88ceae4421495a98953381fd3f08c3f342fa06236","raw_url":"https://app.decimal.ai/s/utkusen-sast-pathtraversal/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/utkusen-sast-pathtraversal"}