Detect SQL, command, SSTI, XSS, and NoSQL injection vulnerabilities in web and API code.
npx skills add https://github.com/n4igme/randscript --skill vuln-injection
Please help me install this Agent Skill. Skill: vuln-injection Source: https://github.com/n4igme/randscript/tree/main/llm/skills/scode/vuln-injection Command: npx skills add https://github.com/n4igme/randscript --skill vuln-injection
Injection flaws arise when user input reaches interpreters without proper sanitization, enabling attackers to manipulate queries or commands. This Skill automates detection and reporting to streamline remediation.
Run vuln-injection on your codebase to scan for common injection flaws and append results to vulnerabilities.md.
High-intent search queries and answers about installing and using this skill.
To scan for SQL and command injection vulnerabilities, apply pattern-based detection to trace user input from sources to risky sinks. This identifies flaws where unsanitized data manipulates queries and appends findings to vulnerabilities.md.
Backtracking from sinks to sources is an analysis method that traces dangerous interpreter calls back to user input entry points. It prioritizes threat-model targets to accurately identify SQL, SSTI, XSS, and NoSQL injection scenarios across web and API code.
Yes, you can detect SSTI and NoSQL injection flaws across web and API code. The scan applies pattern-based analysis to identify where user input reaches dangerous interpreters without proper sanitization across these specific scenarios.
Detected injection vulnerabilities are documented by appending results to vulnerabilities.md. This maintains ongoing findings and provides traceability from user input to risky sinks to support remediation planning for SQL, command, and XSS flaws.
No, this injection scan does not require external dependencies or components. It natively performs pattern-based analysis and backtracking from sinks to sources across web and API code without needing additional environment setup.
harperaaDetect SQL injection and command injection vulnerabilities in AI-generated Python code.
zapabobScan dependencies and custom code for security vulnerabilities.
KuaaMUScan Python FastAPI and React code for OWASP Top 10 vulnerabilities.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
