skills.rest
thejefflarson
thejefflarsonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

injection

Detect injection vulnerabilities in SQL, shell, and template contexts.

20|Updated Feb 27, 2026
Search Tags:#security#injection#input-validation#sql-injection#secure-coding#shell-injection#template-injection
One-click install
npx skills add https://github.com/thejefflarson/soundcheck --skill injection-thejefflarson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: injection
Source: https://github.com/thejefflarson/soundcheck/tree/main/.claude/skills/injection
Command: npx skills add https://github.com/thejefflarson/soundcheck --skill injection-thejefflarson

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Protects codebases from injection vulnerabilities by ensuring user-controlled data is not executed or interpolated directly in SQL, shell, or template contexts.

Core Features & Use Cases

  • Detects vulnerable patterns such as string concatenation in SQL, shell command construction, or template building with user input.
  • Provides guidance to implement parameterized queries, safe argument passing, and proper escaping to prevent exploitation.
  • Use Case: When validating a web service that assembles SQL queries from user input, this skill helps identify and fix injection points.

Quick Start

Identify vulnerable injection points in your codebase and implement parameterization and safe escaping to fix them.

Frequently Asked Questions about injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection when assembling queries from user input?▼

Prevent SQL injection by sanitizing and validating user-controlled data before it reaches the interpreter. This skill detects vulnerable string concatenation patterns and guides you to implement parameterized queries and safe argument passing.

What is the best way to secure shell commands from user input interpolation?▼

Secure shell commands by applying safe argument passing instead of direct string interpolation. This skill detects vulnerable shell command construction and helps implement proper sanitization to prevent shell injection vulnerabilities in scripts.

How does template injection occur and how can I fix vulnerable call sites?▼

Template injection occurs when user-controlled data is interpolated directly into template contexts. This skill identifies vulnerable template building call sites and guides you to implement proper escaping so user input is not executed.

Can I use this injection prevention skill across different web app runtimes?▼

Yes, this injection prevention skill applies to SQL, shell, and template contexts across common web app languages and runtimes. It enforces parameterized queries and proper escaping regardless of your specific platform.

Do I need specific dependencies to identify and fix injection vulnerabilities?▼

No specific dependencies are required to identify and fix injection vulnerabilities. This skill operates independently to detect vulnerable patterns and provide guidance for parameterized queries, safe argument passing, and proper escaping.

Related Skills

Explore More Software Engineering Skills→
lubusINlubusIN
48

frappe-project-triage

Identify Frappe project type, installed apps, version, and tooling.

Official
Intermediate
CybLowCybLow
1

sec-basics

Secure Python applications by validating inputs, preventing SQL injection, and scanning dependencies.

Community
Advanced
latestaiagentslatestaiagents
5

injection-prevention

Detect and prevent SQL, NoSQL, and command injection flaws in code.

Official
Intermediate
vecearvecear

input-validation-sanitization-auditor

Audit API endpoints and apply validation schemas to prevent injection vulnerabilities.

Community
Intermediate