command-injection-testing
Tests for system command injection by identifying entry points, using shell delimiters, and performing blind or active impact assessment.
Install
mkdir -p .claude/skills/command-injection-testing && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/3993" && unzip -o skill.zip -d .claude/skills/command-injection-testing && rm skill.zipInstalls to .claude/skills/command-injection-testing
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
命令注入漏洞测试的专业技能和方法论Key capabilities
- →Identify common command execution points.
- →Test for command injection using various delimiters.
- →Perform blind command injection with time delays.
- →Extract data using out-of-band techniques like DNS.
- →Execute basic system commands on Linux and Windows.
How it works
The skill identifies command execution points in applications, then uses various command delimiters and payloads to detect and exploit command injection vulnerabilities.
Inputs & outputs
When to use command-injection-testing
- →Identify command execution entry points
- →Perform blind command injection testing
- →Verify system security against shell injection
About command-injection-testing
Provides a framework for testing system command injection. It covers identifying vulnerable entry points, using common shell delimiters for detection, and demonstrating impact through blind or active testing.
命令注入漏洞测试的专业技能和方法论
When not to use it
- →The testing is not authorized.
- →The goal is to cause system damage.
- →The focus is on vulnerabilities other than command injection.
Limitations
- →Only conduct testing in authorized environments.
- →Avoid causing damage to systems during testing.
- →Be aware of command differences across operating systems.
How it compares
This skill provides structured methodologies and specific payloads for command injection testing, which is more systematic than ad-hoc manual testing.
Compared to similar skills
command-injection-testing side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| command-injection-testing (this skill) | 1 | 7mo | Review | Advanced |
| security-header-generator | 5 | 9mo | Caution | Intermediate |
| backend-security-coder | 24 | 4mo | No flags | Intermediate |
| security-best-practices | 7 | 6mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by Ed1s0nZ
View all by Ed1s0nZ →You might also like
security-header-generator
Dexploarer
Generates security HTTP headers (CSP, HSTS, CORS, etc.) for web applications to prevent common attacks. Use when user asks to "add security headers", "setup CSP", "configure CORS", "secure headers", or "HSTS setup".
backend-security-coder
sickn33
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
security-best-practices
openai
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.
dependency-auditor
alirezarezvani
Check dependencies for known vulnerabilities using npm audit, pip-audit, etc. Use when package.json or requirements.txt changes, or before deployments. Alerts on vulnerable dependencies. Triggers on dependency file changes, deployment prep, security mentions.
file-upload-testing
Ed1s0nZ
文件上传漏洞测试的专业技能和方法论
sentry-data-handling
jeremylongshore
Manage sensitive data properly in Sentry. Use when configuring PII scrubbing, data retention, GDPR compliance, or data security settings. Trigger with phrases like "sentry pii", "sentry gdpr", "sentry data privacy", "scrub sensitive data sentry".