xpath-injection-anti-pattern

Community

Prevent XPath injection vulnerabilities.

Authorigbuend
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill protects against XPath injection, a critical vulnerability that arises when user input is improperly handled within XPath queries, potentially leading to unauthorized data access or system compromise.

Core Features & Use Cases

  • Vulnerability Detection: Identifies insecure construction of XPath queries using string concatenation or interpolation.
  • Secure Coding Guidance: Provides clear examples of how to use parameterized queries or proper input escaping to prevent injection.
  • Use Case: When reviewing code that processes XML data and constructs XPath queries based on user-provided values, this Skill will flag potential injection risks and offer secure alternatives.

Quick Start

Review the current folder for XPath injection vulnerabilities.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: xpath-injection-anti-pattern
Download link: https://github.com/igbuend/grimbard/archive/main.zip#xpath-injection-anti-pattern

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.