What problem does it solve? When attacker-controlled input reaches a dangerous interpreter, testers often struggle to decide which injection class applies and which deep-dive workflow to follow. This Skill acts as a category router that maps input sinks to the correct injection testing topic. ## Core Features & Use Cases - Sink-Based Routing: Identifies whether input flows into HTML/JS, SQL, template engines, URL fetchers, XML parsers, or shell commands, then points to the matching deep-topic skill. - Comprehensive Skill Map: Links to 18 specialized injection skills including XSS, SQLi, SSRF, XXE, SSTI, CMDi, NoSQL, JNDI, CRLF, prototype pollution, and request smuggling. - Extra Injection Reference: Covers less common types such as SSI, LDAP, XPath, LaTeX injection, encoding bypasses, and PHP variable modification with detection probes and payloads. - Use Case: During a CTF web challenge, you find a login form reflecting input. Use this router to trace the sink, determine it is an LDAP-backed filter, and jump to the LDAP injection methodology with authentication bypass payloads. ## Quick Start Ask the agent to load the injection-checking skill and classify which injection type applies to the user input found in the current challenge.
