second-order-injection-anti-pattern

What problem does it solve?

This Skill addresses the critical security vulnerability of second-order injection, where malicious data is stored safely but executed later, making it hard to detect.

Core Features & Use Cases

• Detects Unsafe Data Reuse: Identifies when data retrieved from databases or storage is used in subsequent queries or commands without re-sanitization.
• Prevents Hidden Payloads: Helps secure applications against attacks where the injection and execution points are separated in time and code.
• Use Case: Reviewing code that logs user actions. If user data is stored in a log table and later used to construct a report query, this skill helps ensure that data is re-validated to prevent an injection that occurred during the initial logging.

Quick Start

Review the attached Python code for potential second-order injection vulnerabilities.