Detect command injection vulnerabilities in radare2 C code workflows.
npx skills add https://github.com/radareorg/radare2-skills --skill aibugs
Please help me install this Agent Skill. Skill: aibugs Source: https://github.com/radareorg/radare2-skills/tree/main/dev/aibugs Command: npx skills add https://github.com/radareorg/radare2-skills --skill aibugs
This Skill helps you identify real bug and vulnerability patterns in radare2-oriented C code, especially cases where attacker-controlled data can lead to command injection through libc-like APIs and radare2 command execution paths.
Use aibugs to audit a C code change for command-injection and shell-injection risk, then recommend minimal, surgical fixes that use appropriate sanitization and safer radare2 APIs.
High-intent search queries and answers about installing and using this skill.
Find command injection vulnerabilities in radare2 C code by identifying risky parsing behavior where attacker-controlled data flows into r_core_cmd-style execution paths and unsafe console syntax handling.
Prevent shell injection in autogenerated radare2 scripts by tracing r_cons_printf usage to inspect generated “*” command outputs, ensuring special characters do not amplify injection risk.
The safest way to execute radare2 core commands with untrusted input is replacing risky parsing with safer r_core_call or call_at patterns instead of injecting untrusted strings into command interpreters.
Sanitize special characters in radare2 C APIs by applying correct sanitization helpers like r_str_sanitize and related functions to untrusted input before passing it to command execution paths.
Yes, you can audit C code changes for radare2 workflow vulnerabilities by verifying identified issues with r2 oneliners and applying minimal surgical fixes using safer APIs and proper sanitization.
Attacker-controlled input causes command injection in radare2 when unsafe parsing allows special characters to be interpreted by libc-like APIs and command execution paths instead of being properly sanitized.
SzantoiAnalyze .NET/C# code for design pattern implementations and improvements.
Chai-UnFix lint errors and formatting issues using yarn, prettier, and linc.
robpitcherNormalize file paths and commands for cross-platform script compatibility.
ngquaanghuyAnalyze AI agent skill files for command injection, data exfiltration, and prompt injection.
