tampering

Analyze source code for injection vulnerabilities and unauthorized data modifications.

12|1|Updated Feb 9, 2026

Search Tags:#security #data integrity #vulnerability assessment #injection #STRIDE #tampering

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill tampering

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: tampering
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/tampering
Command: npx skills add https://github.com/florianbuetow/claude-code --skill tampering

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and remediate threats where attackers can modify data, code, or configuration without detection, safeguarding your application's integrity.

Core Features & Use Cases

Threat Analysis: Detects vulnerabilities like SQL injection, command injection, and unsafe deserialization.
Integrity Assurance: Maps directly to the STRIDE framework's "Tampering with Data" category (T).
Use Case: Analyze your web application's input handling to prevent attackers from altering database records or executing arbitrary code through malicious inputs.

Quick Start

Analyze the current project for tampering risks.

Frequently Asked Questions about tampering

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect data tampering vulnerabilities in source code?▼

To detect data tampering vulnerabilities, analyze source code to identify injection risks and unauthorized modifications by reviewing input validation, data operations, and system command patterns. This maps directly to the STRIDE framework's Tampering with Data category.

What is data tampering in the context of the STRIDE security framework?▼

Data tampering in the STRIDE framework is the 'T' category, where attackers modify data, code, or configuration without detection. It involves analyzing input handling to prevent unauthorized alterations to database records or arbitrary code execution.

How do I check my web application for SQL and command injection risks?▼

Check for injection risks by analyzing your web application's input handling and secure data operations across various frameworks. This detects vulnerabilities like SQL injection, command injection, and unsafe deserialization to prevent arbitrary code execution.

Does this data integrity analysis support multiple programming frameworks and languages?▼

Yes, data integrity analysis supports secure data handling across various frameworks and languages. It evaluates input validation and code patterns related to user input and system commands to identify tampering threats comprehensively.

What is the best way to analyze input validation for unsafe deserialization threats?▼

The best way to analyze input validation for unsafe deserialization is to scan source code for data tampering threats and unauthorized modifications. This vulnerability assessment focuses on secure data handling and maps to STRIDE's tampering category.