perseus-injection

Analyze deep injection vulnerabilities across NoSQL, LDAP, XPath, template engines, and OS commands.

66|14|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/kaivyy/perseus --skill perseus-injection
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: perseus-injection
Source: https://github.com/kaivyy/perseus/tree/main/skills/perseus/specialists/injection
Command: npx skills add https://github.com/kaivyy/perseus --skill perseus-injection

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Deep-dive into injection vulnerability analysis across NoSQL, LDAP, XML/XPath, template engines, and command execution to proactively secure applications.

Core Features & Use Cases

  • Cross-language injection coverage across JavaScript, Python, Java, Go, PHP, Ruby, and more.
  • Structured, multi-phase analysis from detection to verification, with a safe, reference payload guide.
  • Use Case: After an initial audit, identify, categorize, and remediate injection points to prevent unauthorized access or data leakage.

Quick Start

Run an injection analysis against your codebase with Perseus to uncover deep injection risks and generate a comprehensive report.

Frequently Asked Questions about perseus-injection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect NoSQL and LDAP injection vulnerabilities in a multi-language codebase?

Detecting NoSQL and LDAP injection vulnerabilities requires analyzing multi-language codebases like Node.js, Python, and Java to identify targeted injection risks. A deep-dive analysis categorizes these risks and provides remediation guidance to prevent unauthorized data access.

What is template engine injection and how do I analyze it across my application?

Template engine injection happens when user input is unsafely embedded into templates allowing code execution. You analyze it by running a targeted detection scan across your codebase to locate unsanitized template variables and generate a report with safe payload references and remediation steps.

Can I analyze OS command injection risks across Go, PHP, and Ruby simultaneously?

Yes, you can analyze OS command injection risks across Go, PHP, and Ruby simultaneously using a cross-language injection analysis tool. It processes multi-language codebases to detect command execution vulnerabilities and outputs a structured markdown report with risk classifications and remediation guidance.

How do I categorize XPath injection risks after an initial security audit?

To categorize XPath injection risks after an initial audit, run a deep-dive injection analysis on your codebase. This classifies identified vulnerabilities by risk level and generates a detailed markdown deliverable containing remediation guidance and a safe payload reference for verification.

Does deep injection analysis work without dependencies for a Node.js security review?

Yes, deep injection analysis works without external dependencies for a Node.js security review. It applies targeted detection logic directly to your codebase to identify NoSQL, template, and command execution risks, outputting a comprehensive analysis report with remediation guidance.