Detect NoSQL injection vulnerabilities across MongoDB, Redis, CouchDB, DynamoDB, and Elasticsearch.
npx skills add https://github.com/ersinkoc/security-check --skill sc-nosqli
Please help me install this Agent Skill. Skill: sc-nosqli Source: https://github.com/ersinkoc/security-check/tree/main/skills/sc-nosqli Command: npx skills add https://github.com/ersinkoc/security-check --skill sc-nosqli
Detects NoSQL injection vulnerabilities in applications using MongoDB, Redis, CouchDB, DynamoDB, and Elasticsearch by identifying unsafe query construction and operator usage patterns.
Run the scanner against your project to identify Nosql injection risks.
High-intent search queries and answers about installing and using this skill.
Detect NoSQL injection in MongoDB and Redis by scanning source code and configuration files to identify unsafe query construction and dangerous operator usage patterns. The scanner traces data flow from user input to the query layer.
NoSQL injection vulnerabilities impact MongoDB, Redis, CouchDB, DynamoDB, and Elasticsearch. Unsafe query construction allows attackers to manipulate database operators through user-supplied parameters reaching the query layer.
Scan microservice source code for NoSQL injection risks by tracing user-supplied query parameters to database API calls. The analysis identifies dangerous query constructions and provides structured findings with actionable remediation guidance.
This NoSQL injection scanner applies to web, microservice, and serverless architectures. It analyzes API integration scenarios and query construction across these environments to verify exploit patterns and confirm security impact.
Fix NoSQL injection vulnerabilities by implementing input validation, query sanitization, and safe database access practices. The scanner provides actionable remediation guidance alongside structured findings for each detected vulnerability.
Automated NoSQL injection detection analyzes query construction and operator usage patterns in source code. It requires access to the application codebase and configuration files to trace data flow and identify potential injection vectors accurately.
jinyimeng01Detect exposed source code and credentials via targeted repository searches.
TheWayWithinEnforce tenant isolation with Row-Level Security and tenant context middleware.
PrirogativusIdentify and mitigate security vulnerabilities in codebases via static analysis.
dungsnowaxeTest NoSQL injection vulnerabilities across MongoDB, Cassandra, CouchDB, Redis, and Elasticsearch.
