custom-sanitizer-audit

What problem does it solve?

Homegrown sanitization, filter, and input validation functions lack the extensive adversarial testing of framework-provided alternatives, leaving applications exposed to undetected bypass attacks like cross-site scripting (XSS), SQL injection, and path traversal that manual code reviews often miss.

Core Features & Use Cases

• Five-Point Bypass Checklist: Systematically evaluate custom sanitizers against case sensitivity, global replacement, recursion, completeness, and consistent application across all input routes to catch common implementation flaws.
• Ordering Bug Detection: Identify validate-then-transform vulnerabilities where sanitization is applied in the wrong order relative to decoding, normalization, or concatenation operations.
• Language-Specific Anti-Pattern Library: Access reference guides for common bypassable patterns and rationalizations to reject across PHP, JavaScript, Python, Ruby, Java, and Go.
• Use Case: Use this skill during security code reviews of web applications, red team engagements targeting input validation controls, or when auditing custom security wrappers for bypass vulnerabilities.

Quick Start

Use the custom-sanitizer-audit skill to audit the custom sanitize_user_input() function in the account registration flow for bypass vulnerabilities.