vuln-patterns-injection

What problem does it solve?

This Skill helps identify and prevent injection vulnerabilities in Python code, such as command injection, SQL injection, and code injection, which can lead to unauthorized access or data breaches.

Core Features & Use Cases

• Source Identification: Detects user input from various sources like HTTP requests, LLM outputs, and configuration files.
• Sink Analysis: Analyzes dangerous functions like eval(), exec(), subprocess with shell=True, and SQL execution functions.
• Sanitization Validation: Checks for proper security measures like parameterized queries and input validation.
• Use Case: When auditing a web application, use this Skill to automatically scan for instances where user-provided data might be used in constructing SQL queries or system commands, flagging potential SQL injection or command injection flaws.

Quick Start

Use the vuln-patterns-injection skill to audit the provided Python script for potential injection vulnerabilities.