AI-Generated Insecure Deserialization Review Rules
No required blockers for this preset.
caution
64/100
Collect package checksum or signed artifact information.
rules/ai-generated-insecure-deserialization-review-rules · trust review · confidence 83%
Browse the directory
/
Showing 1 resource for "remote-code-execution"
Saved
/ search · [ ] view density · esc clear input
Active
Adoption queue
Browse adoption queue · balanced
0/1 visible results are ready for staged adoption under this preset.
ready 0caution 1hold 0
Decision confidence
Decision confidence scan · balanced
0/1 results are high-confidence for the selected preset.
high 0medium 1low 0
AI-Generated Insecure Deserialization Review Rules
Address Package integrity before broader rollout.
medium
68/100
Missing: Package integrity
rules/ai-generated-insecure-deserialization-review-rules · trust review
rulesReview firstSource-backedReview firstClaude Code
Source-backed rules for reviewing AI-generated code that deserializes data before merge for insecure deserialization risk, covering native serialization formats (pickle, PyYAML, Java Serializable) that can execute arbitrary code on untrusted input, safe data-interchange alternatives, and class allowlisting/integrity checks when native formats can't be avoided.
Safety ✓ Privacy ✓