command-injection-anti-pattern

What problem does it solve?

This Skill helps prevent attackers from executing arbitrary operating system commands by exploiting vulnerabilities in how user input is handled when constructing shell commands.

Core Features & Use Cases

• Detects Vulnerable Code: Identifies instances where user input is directly concatenated into shell commands.
• Provides Secure Alternatives: Offers examples of how to safely execute commands using argument arrays and input validation.
• Use Case: Reviewing code that processes user-provided filenames for a command-line utility to ensure malicious input like ; rm -rf / cannot be executed.

Quick Start

Review the current directory for command injection vulnerabilities.