skills.rest
apisec-inc
apisec-incOFFICIAL
Explore all skills by this author →
WebsiteGitHub

injection-checker

Detect and fix code injection vulnerabilities across multiple programming languages.

18|1|Updated Mar 12, 2026
Search Tags:#code review#security#owasp#injection#sql#command execution#ssti
One-click install
npx skills add https://github.com/apisec-inc/apisec-skills --skill injection-checker
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: injection-checker
Source: https://github.com/apisec-inc/apisec-skills/tree/main/skills/injection-checker
Command: npx skills add https://github.com/apisec-inc/apisec-skills --skill injection-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill safeguards your applications by identifying and rectifying various code injection vulnerabilities, preventing data breaches and unauthorized access.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for SQL injection, NoSQL injection, command injection, path traversal, and Server-Side Template Injection (SSTI).
  • Code Remediation: Provides specific, corrected code snippets to fix identified vulnerabilities.
  • OWASP Coverage: Maps detected vulnerabilities to relevant OWASP API Security Top 10 categories, primarily API8:2023.
  • Use Case: When reviewing code that handles user input for database queries, use this Skill to ensure no SQL injection vulnerabilities are present and get a safe, parameterized query as a fix.

Quick Start

Analyze the provided code snippet for any potential injection vulnerabilities and suggest secure alternatives.

Frequently Asked Questions about injection-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find and fix SQL injection vulnerabilities in my code?▼

To detect SQL injection vulnerabilities, this tool scans your code for unsafe database queries and generates corrected snippets utilizing secure coding practices like parameterized queries. It maps findings to OWASP API8:2023 to prevent unauthorized data access.

What is the best way to prevent Server-Side Template Injection (SSTI) during code review?▼

Preventing Server-Side Template Injection (SSTI) involves scanning templates for unsafe user input handling and applying safe code generation patterns. This tool identifies SSTI risks and provides concrete fixes to mitigate unauthorized code execution vulnerabilities.

How do I mitigate path traversal and command injection risks in user input handling?▼

Mitigating path traversal and command injection risks requires enforcing safe file path handling and restricting command execution. This tool identifies these vulnerabilities across multiple programming languages and provides explicit field extraction patterns for secure remediation.

Does this injection checker support NoSQL databases and multiple programming languages?▼

Yes, this injection checker supports NoSQL databases and multiple programming languages by identifying NoSQL injection risks alongside SQL, command, path traversal, and SSTI vulnerabilities. It enforces explicit field extraction to secure unsafe queries.

How does this tool map detected vulnerabilities to the OWASP API Security Top 10?▼

This tool maps detected vulnerabilities to the OWASP API Security Top 10 by specifically addressing OWASP API8:2023. It scans for code injection risks like SQL and SSTI, providing concrete fixes and secure coding patterns to ensure compliance.

Related Skills

Explore More Software Engineering Skills→
n4igmen4igme

vuln-injection

Detect SQL, command, SSTI, XSS, and NoSQL injection vulnerabilities in web and API code.

Community
Advanced
pelletencatepelletencate

security

Identify and remediate security vulnerabilities in Rails 8 applications.

Community
Advanced
aaddrickaaddrick
5.3k

lint

Lint shell scripts with shellcheck and GitHub Actions workflows with actionlint.

Community
Basic
AcczdyAcczdy
2

implementing-runtime-application-self-protection

Deploy RASP agents to detect and block in-app attacks in Java and Python web applications.

Community
Advanced