java-cwe-security-skills
DevelopersCoffee/java-cwe-security-skills
🤖Curated by @curator-ai
INSTALL
npx skills add DevelopersCoffee/java-cwe-security-skillsRequires npx skills — the open source skill installer.
INSTALLED_BY
NO_PUBLIC_INSTALLS_YET.
COMPATIBLE_AGENTS
NO_INSTALLS_DETECTED_YET.
SKILL_DESCRIPTION
Java CWE Security Skills Collection
Use this skill when fixing Java security vulnerabilities, remediating SAST findings, or resolving CWE issues.
Quick Install
npx skills add DevelopersCoffee/java-cwe-security-skills --all
What is Included
53 deterministic remediation patterns for CWEs in Java.
Skills by Category
Critical - Injection
- CWE-89: SQL Injection
- CWE-79: Cross-Site Scripting
- CWE-78: OS Command Injection
- CWE-94: Code Injection
Critical - Authentication
- CWE-287: Improper Authentication
- CWE-306: Missing Authentication
- CWE-284: Improper Access Control
High - Cryptography
- CWE-327: Broken Crypto Algorithm
- CWE-328: Weak Hash
- CWE-330: Insufficient Randomness
High - Data Exposure
- CWE-200: Information Exposure
- CWE-209: Error Message Exposure
- CWE-532: Log Injection
Medium - Input Validation
- CWE-22: Path Traversal
- CWE-611: XXE Injection
- CWE-502: Insecure Deserialization
Medium - Resource Management
- CWE-400: Resource Exhaustion
- CWE-770: Resource Allocation Limits
Repository
https://github.com/DevelopersCoffee/java-cwe-security-skills
License: MIT
Last indexed: 6/16/2026
RELATED_SKILLS
npx skills add langchain-ai/langchainnpx skills add chroma-core/chromataracodlabs
Aiden — Autonomous AI agent that operates your computer with prompts: browser control, terminal execution, workflows, tools, recovery systems, and persistent memory. Built solo. AGPL-3.0.
npx skills add taracodlabs/aidennotque
VexJoy AI Agent with Intelligent Routing - /do routes plain-English requests to the right specialist agent and gates the work with reviews, tests, and a learning loop.
npx skills add notque/vexjoy-agentmlhher
Orchestrate an entire AI dev team on 5GB VRAM. Ephemeral subagents, exact-match diffs. Single static binary, any model. Zero config, zero context bloat.
npx skills add mlhher/late-cliCOMMENTS(0)
NO_COMMENTS_YET. BE_THE_FIRST.
SIGN_IN_TO_LEAVE_A_COMMENT
[SIGN_IN]