taint-instrumentation-assistant

What problem does it solve?

This Skill helps identify and prevent security vulnerabilities by tracking the flow of untrusted or sensitive data through your codebase, thereby detecting potential injection attacks and data leaks.

Core Features & Use Cases

• Taint Source Identification: Define origins of untrusted data (user input, file reads, network).
• Taint Propagation Tracking: Monitor how tainted data moves through code operations.
• Taint Sink Detection: Identify dangerous operations where tainted data could cause harm (SQL queries, command execution).
• Use Case: Detect if user-provided input in a web application can be used to execute arbitrary SQL commands, leading to a data breach.

Quick Start

Instrument the provided Python code to track tainted user input propagating to SQL queries.