---
title: "List security scan patterns"
method: GET
path: "/api/v1/security-scan/patterns"
tags: ["Security Scans"]
---

# List security scan patterns

`GET /api/v1/security-scan/patterns`

## Request

- Base URL: `https://api.skills-hub.ai`
- URL: `https://api.skills-hub.ai/api/v1/security-scan/patterns`
- Auth: one of:
  - HTTP bearer
  - API key in header `Authorization`

Returns the public security-scan methodology feed: every detection pattern's `id`, `label`, `severity`, `category`, and `message`, without exposing the underlying regex. Public. Powers the `/security` page.

## Response `200`

Successful response. The returned fields are described in this endpoint's summary/description; typed per-field response schemas are being added incrementally.

- object
  - `total` integer, required
  - `patterns` object[], required
    - `id` string, required
    - `label` string, required
    - `message` string, required
    - `severity` 'error' | 'warning' | 'info', required
    - `category` 'shell' | 'exfiltration' | 'prompt-injection' | 'command-injection' | 'secrets' | 'fs-escape' | 'ssrf' | 'supply-chain' | 'sql-injection' | 'privilege-escalation' | 'container-escape' | 'deserialization' | 'llm-specific' | 'obfuscation', required

---

[API](https://skmtc.dev/skills-hub/apis/skills-hub-ai-api.md) · [All operations](https://skmtc.dev/skills-hub/apis/skills-hub-ai-api/llms.txt) · [OpenAPI document](https://skmtc.dev/skills-hub/apis/skills-hub-ai-api/revisions/cb5d46d80300?raw)