Detect OS command injection in shell execution and subprocess calls.
npx skills add https://github.com/kocakburhan/emlakdefter --skill sc-cmdi-kocakburhan
Please help me install this Agent Skill. Skill: sc-cmdi Source: https://github.com/kocakburhan/emlakdefter/tree/main/.agents/skills/security-check/skills/sc-cmdi Command: npx skills add https://github.com/kocakburhan/emlakdefter --skill sc-cmdi-kocakburhan
Detects OS command injection vulnerabilities in code that uses shell execution, subprocess calls, or process spawning, distinguishing between full command injection and argument injection.
Scan your codebase for risky command executions and report vulnerable patterns.
High-intent search queries and answers about installing and using this skill.
You can detect OS command injection vulnerabilities by running static analysis across multi-language codebases to identify risky shell execution, subprocess calls, and process spawning patterns with structured remediation guidance.
Command injection exploits shell execution to run arbitrary commands, while argument injection manipulates process spawning parameters. This Skill uses phase-based discovery and verification to distinguish between full command and argument injection during security reviews.
Yes, cross-language coverage detects risky command execution patterns in Python, JavaScript/Node.js, Go, PHP, Java, C#, and Ruby by scanning subprocess calls and process spawning during static analysis.
You can integrate command injection detection into automated CI checks by running static analysis to surface vulnerabilities early during code reviews, ensuring risky shell execution patterns are caught before deployment.
The best way to scan codebases for risky subprocess calls is using phase-based discovery and verification that identifies vulnerable patterns in shell execution and provides clear findings for command and argument injection.
RedHatProductSecurityAutomate static code analysis for security vulnerabilities across multi-language repositories.
sugarforeverScan Python projects for security vulnerabilities and dependency issues.
IndustrialAnalyze code for security vulnerabilities and performance issues.
ArianHobson333Detect and exploit web application vulnerabilities using sqlmap, ysoserial, and PHPGGC.
