Skills
.Work. You
Rest

aibugs

Official

Find and fix radare2 injection bugs in C.

Software Engineering#sanitization#command injection#vulnerability analysis#radare2#bug finding#C security#autogenerated scripts
Authorradareorg
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps you identify real bug and vulnerability patterns in radare2-oriented C code, especially cases where attacker-controlled data can lead to command injection through libc-like APIs and radare2 command execution paths.

Core Features & Use Cases

  • Command injection detection: Reviews usage of radare2 core command APIs and flags risky parsing behavior when special characters are attacker-influenced.
  • Safer API guidance: Prioritizes safer alternatives such as call-oriented functions and temporal control primitives instead of injecting untrusted strings into command interpreters.
  • Autogenerated script review: Guides you to inspect autogenerated “*” command outputs by tracing r_cons_printf usage to ensure generated scripts do not amplify injection risk.

Quick Start

Use aibugs to audit a C code change for command-injection and shell-injection risk, then recommend minimal, surgical fixes that use appropriate sanitization and safer radare2 APIs.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: aibugs
Download link: https://github.com/radareorg/radare2-skills/archive/main.zip#aibugs

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.