security-review-owasp-os-command-injection-defense

What problem does it solve?

This Skill helps reviewers identify when untrusted input can reach commands, interpreters, redirect targets, or sensitive state changes in unsafe ways.

Core Features & Use Cases

• Boundary Analysis: Traces how attacker-controlled data moves through validation, normalization, binding, and execution paths.
• Exploit Prioritization: Distinguishes direct command execution risks from weaker formatting, routing, or configuration issues.
• Review Evidence: Anchors findings in visible code, tests, documentation, or behavior instead of speculation.
• Use Case: Apply it when reviewing an authentication flow, webhook handler, admin tool, or deployment script that may pass user input into shell commands or other privileged sinks.

Quick Start

Use the security-review-owasp-os-command-injection-defense skill to review the target files for unsafe input-to-execution paths and report any confirmed command injection weaknesses.