Trace user-controlled input from sources to dangerous sinks to detect injection vulnerabilities.
npx skills add https://github.com/MAF2414/kyco --skill injection-hunter
Please help me install this Agent Skill. Skill: injection-hunter Source: https://github.com/MAF2414/kyco/tree/main/.claude/skills/injection-hunter Command: npx skills add https://github.com/MAF2414/kyco --skill injection-hunter
Injection vulnerabilities arise when untrusted user input flows into sensitive operations, enabling attackers to manipulate behavior or exfiltrate data. This Skill helps identify and trace tainted data from sources to dangerous sinks across the codebase, covering SQL injection, OS command injection, XSS, SSTI, path traversal, LDAP and XML injections.
Analyze a codebase to locate and report injection flaws from user input to dangerous sinks.
High-intent search queries and answers about installing and using this skill.
Taint tracking traces user-controlled input from sources to dangerous sinks to uncover injection vulnerabilities. This process enforces data flow analysis across web applications, APIs, and services to identify where untrusted inputs interact with databases, shells, or templates.
Taint analysis detects SQL injection, OS command injection, XSS, SSTI, path traversal, LDAP, and XML injections. It asserts common insecure patterns by tracing how untrusted user input flows into sensitive operations across multiple application layers.
Injection analysis applies to web applications, APIs, and services where inputs flow through multiple layers. It traces tainted data regardless of the entry point, covering interactions with databases, shells, and templates across diverse service architectures.
Injection vulnerability analysis generates structured findings suitable for remediation planning and compliance. It identifies insecure patterns from user input sources to dangerous sinks and outputs actionable data to guide code fixes.
Taint analysis is the best way to detect SSTI and path traversal flaws by tracing untrusted user input from sources to template engines or file system sinks. It identifies common insecure patterns and provides remediation guidance.
mscipioParse source code into Abstract Syntax Trees for symbol extraction and variable flow tracing.
petrSimonidesXartScan code, configurations, and deployments to generate vulnerability reports with remediation steps.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
dreadnodeMap security testing signals to CWE vulnerability references and test strategies.
