mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-20 06:20:58 +03:00
Production hardening: security fixes, code quality, 724 skills complete
- Fix 25 shell=True subprocess calls with list-based commands - Fix 49 verify=False in defensive skills (env-var override) - Add timeout to 231 HTTP/subprocess/socket calls - Fix 6 SQL injection patterns with whitelist validation - Replace 8 __import__() with standard imports - Remove 701 unused imports across 442 files - Add authorized-testing disclaimers to all offensive skills - Complete 11 incomplete skill directories - Expand 10 stub SKILL.md files with full content - Fix 2 YAML parse errors in frontmatter - Fix 5 pre-existing syntax errors - Convert 22 hardcoded paths/ports to environment variables - Back up 21 redundant skill pairs to .bak - Fix 2 global declaration errors - 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE) - 0 compile errors across all 724 agent.py files
This commit is contained in:
@@ -9,11 +9,12 @@ iOS and Android file system extractions.
|
||||
import sqlite3
|
||||
import json
|
||||
import sys
|
||||
import csv
|
||||
import os
|
||||
import re
|
||||
from pathlib import Path
|
||||
from datetime import datetime
|
||||
|
||||
_SAFE_TABLE_RE = re.compile(r'^[a-zA-Z_][a-zA-Z0-9_]*$')
|
||||
|
||||
|
||||
class MobileForensicsAgent:
|
||||
"""Parses mobile device extraction data for forensic analysis."""
|
||||
@@ -147,10 +148,14 @@ class MobileForensicsAgent:
|
||||
cursor.execute("SELECT name FROM sqlite_master WHERE type='table'")
|
||||
tables = [row[0] for row in cursor.fetchall()]
|
||||
for table in tables:
|
||||
if not _SAFE_TABLE_RE.match(table):
|
||||
continue
|
||||
try:
|
||||
cursor.execute(f"SELECT * FROM [{table}] LIMIT 1")
|
||||
columns = [desc[0] for desc in cursor.description]
|
||||
for col in columns:
|
||||
if not _SAFE_TABLE_RE.match(col):
|
||||
continue
|
||||
cursor.execute(
|
||||
f"SELECT [{col}] FROM [{table}] WHERE [{col}] LIKE ?",
|
||||
[f"%{keyword}%"]
|
||||
|
||||
Reference in New Issue
Block a user