Run any Skill in Manus with one click

path-traversal

Stars2,737

Forks699

UpdatedJune 1, 2026 at 15:28

Flag file paths built from user-supplied names without sanitization, symlink-following in tenant dirs, and unvalidated archive extraction (CWE-22).

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

kubernetes-sigs

kubernetes-sigs/kueue

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Information Security AnalystsComputer and Mathematical Occupations·SOC 15-1212

SKILL.md

readonly

name	path-traversal
description	Flag file paths built from user-supplied names without sanitization, symlink-following in tenant dirs, and unvalidated archive extraction (CWE-22).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Path Traversal

File paths built from user-supplied names without filepath.Clean plus a prefix check against an allowlisted root.
Symlinks followed in tenant-controlled directories.
Archive extraction without validating each entry stays within the destination root (zip-slip, CWE-22).

path-traversal

Skill: Path Traversal

More from this repository

Skill: Path Traversal

More from this repository