java-audit-skill
This skill provides AI-driven security audits for Java and frontend code, identifying vulnerabilities and generating detailed reports.
Install this skill
Security score
The java-audit-skill skill was audited on May 24, 2026 and we found 22 security issues across 3 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
Direct command execution function call
| 581 | grep -rn "Runtime\.getRuntime\|ProcessBuilder\|exec(" --include="*.java" --include="*.kt" |
Direct command execution function call
| 796 | 发现 `Runtime.exec(cmd)` → 追踪 `cmd` 参数来源 → 检查是否有过滤 → 判断是否来自用户输入 |
Template literal with variable interpolation in command context
| 629 | ```bash |
Template literal with variable interpolation in command context
| 659 | ```powershell |
Template literal with variable interpolation in command context
| 1713 | ``` |
Template literal with variable interpolation in command context
| 1852 | ```bash |
Access to hidden dotfiles in home directory
| 436 | node ~/.openclaw/workspace/skills/tavily-search/scripts/search.mjs "mvnrepository {groupId} {artifactId}" -n 5 |
Access to hidden dotfiles in home directory
| 972 | node ~/.openclaw/workspace/skills/tavily-search/scripts/search.mjs "mvnrepository {groupId} {artifactId}" -n 5 |
External URL reference
| 415 | https://mvnrepository.com/artifact/{groupId}/{artifactId} |
External URL reference
| 420 | https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient |
External URL reference
| 421 | https://mvnrepository.com/artifact/com.alibaba/fastjson |
External URL reference
| 422 | https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core |
External URL reference
| 423 | https://mvnrepository.com/artifact/org.apache.shiro/shiro-core |
External URL reference
| 445 | 访问 https://mvnrepository.com/artifact/{groupId}/{artifactId} |
External URL reference
| 461 | **Step 1**: 访问 `https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient` |
External URL reference
| 507 | - 检查 URL: https://mvnrepository.com/artifact/org.apache.httpcomponents/httpclient |
External URL reference
| 513 | - 检查 URL: https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core |
External URL reference
| 956 | URL 格式: https://mvnrepository.com/artifact/{groupId}/{artifactId} |
External URL reference
| 959 | https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core |
External URL reference
| 960 | https://mvnrepository.com/artifact/com.alibaba/fastjson |
External URL reference
| 961 | https://mvnrepository.com/artifact/org.apache.shiro/shiro-core |
External URL reference
| 1480 | - https://example.com/reference |