mcpField
I
injection-checking

injection-checking

github.com/yaklangSecurity2.6k3.8k installsUpdated 6w ago
Repository

About injection-checking

injection-checking is a security skill for routing suspected injection issues to the appropriate testing topic. It helps testers trace input to its final interpreter or execution sink, then choose focused guidance such as XSS, SQLi, SSRF, or command injection.

Key features

  1. 01Input-to-sink triage
  2. 02Browser and database injection topics
  3. 03Template and URL-fetching topics
  4. 04XML and command injection topics
  5. 05Additional injection categories

Use cases

  1. 01Selecting a focused test after finding a risky input path
  2. 02Identifying which interpreter receives user input

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/yaklang/hack-skills --skill injection-checking

After installing, type/injection-checkingin Claude Code to confirm it loaded.

Bundled filesEXTRA_INJECTION_TYPES.md

Details

From the project README

Injection Testing Router

This is the routing entry point when input reaches a dangerous interpreter or execution environment.

After confirming this is an injection-class issue, use it to decide whether it is mainly browser context, database, template engine, server-side requests, XML parsing, or system commands.

When to Use

  • Input reaches HTML, JS, SQL, templates, URL fetchers, XML parsers, or shell
  • You have not yet decided whether to start with XSS, SQLi, SSRF, XXE, SSTI, CMDi, or NoSQL
  • You need to choose the correct deep-topic skill based on input flow

Skill Map

Recommended Flow

  1. First identify the final sink of the input
  2. Then choose the topic skill that best matches that interpreter
  3. Small payload samples and quick triage are merged into each main skill; no extra payload router is needed

Related Categories

Comments

Markdown supported