security-review-owasp-injection-prevention

What problem does it solve?

This Skill helps reviewers find injection flaws where attacker-controlled input reaches interpreters, binders, redirect targets, or privileged state changes without strict control.

Core Features & Use Cases

• Boundary Review: Traces untrusted data through validation, normalization, binding, serialization, and execution paths.
• Exploitability Focus: Prioritizes direct code execution, query manipulation, privilege mutation, and attacker-controlled routing over superficial formatting issues.
• Evidence-Based Reporting: Produces confirmed findings, review gaps, passed checks, and an overall assessment tied to OWASP Injection Prevention guidance.

Quick Start

Use the security-review-owasp-injection-prevention skill to review the specified flow or files for untrusted input reaching dangerous sinks and report only evidence-backed findings.