injection-vulnerabilities-ai-generated-code

Detect SQL injection and command injection vulnerabilities in AI-generated Python code.

15|1|Updated Oct 20, 2025

Search Tags:#security #vulnerability #xss #injection #sql-injection #code-review #command-injection

Ready to run

npx skills add https://github.com/harperaa/secure-claude-skills --skill injection-vulnerabilities-ai-generated-code

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: injection-vulnerabilities-ai-generated-code
Source: https://github.com/harperaa/secure-claude-skills/tree/main/security-awareness/injection-vulnerabilities
Command: npx skills add https://github.com/harperaa/secure-claude-skills --skill injection-vulnerabilities-ai-generated-code

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automatically identifies and helps fix dangerous injection vulnerabilities that AI models frequently generate, preventing data breaches and system compromises before they happen.

Core Features & Use Cases

SQL Injection Detection: Spot vulnerable database queries with direct string interpolation and replace them with secure parameterized queries.
Command Injection Prevention: Replace unsafe exec() calls with secure spawn() implementations.
XSS Vulnerability Analysis: Identify unescaped user content in HTML generation and implement proper output encoding.
Use Case: When your AI generates database query code, use this Skill to automatically scan for SQL injection patterns and provide secure alternatives.

Quick Start

Analyze this Python database function for SQL injection vulnerabilities and show me the secure version.