injection-test

Detect and validate SQL, NoSQL, command, LDAP, and XSS injection flaws.

6|Updated May 30, 2026
One-click install
npx skills add https://github.com/jassics/awesome-claude-security --skill injection-test
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: injection-test
Source: https://github.com/jassics/awesome-claude-security/tree/main/plugins/web-app-security/skills/injection-test
Command: npx skills add https://github.com/jassics/awesome-claude-security --skill injection-test

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill identifies potential injection flaws in web applications, crucial for maintaining security.

Core Features & Use Cases

  • Comprehensive Testing: Assesses SQL/NoSQL, command, LDAP, and XSS injection vulnerabilities.
  • Probing and Validation: Uses safe payloads to probe input sources and confirm interpreter interaction.
  • Evidence Collection: Collects and presents PoC, context, and remediation strategies for confirmed issues.
  • Use Case: Validate the OWASP A03 injection flaw on an authorized target by proactively probing for vulnerable points.

Quick Start

Run the injection-test skill on your target web application to detect and validate injection flaws.

Frequently Asked Questions about injection-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect SQL and NoSQL injection vulnerabilities in a web application?

To detect SQL and NoSQL injection vulnerabilities, you can probe web application inputs using safe marker payloads to confirm interpreter interaction and validate potential flaws. This process identifies vulnerable points and collects proof-of-concept evidence for remediation.

What is the best way to test for OWASP A03 injection flaws without damaging the target?

The best way to test for OWASP A03 injection flaws non-destructively is by using safe marker payloads to probe input sources. This validates interpreter interaction and confirms vulnerabilities while ensuring the testing process does not harm the target application.

Does injection testing require authorization before probing web application inputs?

Yes, injection testing requires explicit authorization before probing web application inputs. You must have permission to test the target to ensure legal compliance and safe execution of vulnerability assessments using marker payloads.

How do I validate XSS and LDAP injection points during a web security assessment?

To validate XSS and LDAP injection points during a web security assessment, probe inputs with safe payloads to verify interpreter interaction. Confirmed issues are documented with context, proof-of-concept evidence, and suggested remediation strategies.

Can I get remediation strategies for confirmed command injection flaws automatically?

Yes, you can get remediation strategies for confirmed command injection flaws automatically. After probing inputs and validating the interpreter interaction, the process collects evidence and suggests targeted remediation strategies for the identified issues.