Skip to main content
affpapa.org
RU EN
skill CX Codex

injection-checking — Claude Code skill: routing injection tests

A router skill for injection testing: pick the right workflow based on where attacker-controlled input ends up.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add yaklang/hack-skills --skill injection-checking -a claude-code
Open on GitHub

What injection-checking does

injection-checking is the entry point for the injection category. Once input reaches a dangerous interpreter or execution environment, the skill helps you tell whether you are dealing with browser context, a database, a template engine, server-side requests, XML parsing, or system commands.

Inside is a map of related skills: XSS, SQLi, SSRF, XXE, SSTI, CMDi, NoSQL, deserialization, JNDI, expression language, CRLF, request smuggling, prototype pollution, type juggling, HTTP parameter pollution, XSLT, CSV formula injection, plus extra types such as SSI, LDAP and XPath. The recommended flow is simple: identify the final sink of the input first, then pick the skill matching that interpreter. Small payload samples and quick triage are merged into each main skill, so no separate payload router is needed.

Reach for it when you have not yet decided between XSS, SQLi, SSRF, XXE, SSTI, CMDi and NoSQL. If the input never reaches an interpreter, this router is not the tool you want.

What it helps with

  • pick a testing workflow from the final sink of the input
  • separate XSS, SQLi and SSRF when the starting point is unclear
  • find the right skill for template engines and XML parsing
  • navigate rarer types like CRLF and prototype pollution
  • classify injection into system commands

Example prompts for the agent

  • form input reaches SQL — which skill should I use?
  • user input lands in a template engine, help me sort it out
  • I can't tell if this is XSS or SSRF, point me in a direction

How to install injection-checking

1Skills CLI (Vercel)

npx skills add yaklang/hack-skills --skill injection-checking -a claude-code

2Manually: put the files in place

~/.claude/skills/injection-checking/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/injection-checking/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about injection-checking

How do I install injection-checking in Claude?

Run npx skills add yaklang/hack-skills --skill injection-checking -a claude-code. The skill lands in ~/.claude/skills/injection-checking/SKILL.md.

What does injection-checking do?

It is a category router for injection. It helps determine where attacker-controlled input is consumed and picks the right deep-topic skill: XSS, SQLi, SSRF, XXE, SSTI, CMDi, NoSQL and others.

Do I need a separate payload router?

No. Small payload samples and quick triage are already merged into each main skill.

Source text

SKILL.md · MIT 
---
name: injection-checking
description: >-
  Entry P1 category router for injection testing. Use when routing between XSS,
  SQLi, SSRF, XXE, SSTI, command injection, and NoSQL injection workflows based
  on how attacker-controlled input is consumed.
---

# Injection Testing Router

This is the routing entry point when input reaches a dangerous interpreter or execution environment.

After confirming this is an injection-class issue, use it to decide whether it is mainly browser context, database, template engine, server-side requests, XML parsing, or system commands.

## When to Use

- Input reaches HTML, JS, SQL, templates, URL fetchers, XML parsers, or shell
- You have not yet decided whether to start with XSS, SQLi, SSRF, XXE, SSTI, CMDi, or NoSQL
- You need to choose the correct deep-topic skill based on input flow

## Skill Map

- [XSS Cross Site Scripting](../xss-cross-site-scripting/SKILL.md)
- [SQLi SQL Injection](../sqli-sql-injection/SKILL.md)
- [SSRF Server Side Request Forgery](../ssrf-server-side-request-forgery/SKILL.md)
- [XXE XML External Entity](../xxe-xml-external-entity/SKILL.md)
- [SSTI Server Side Template Injection](../ssti-server-side-template-injection/SKILL.md)
- [CMDi Command Injection](../cmdi-command-injection/SKILL.md)
- [NoSQL Injection](../nosql-injection/SKILL.md)
- [Deserialization Insecure](../deserialization-insecure/SKILL.md)
- [JNDI Injection](../jndi-injection/SKILL.md)
- [Expression Language Injection](../expression-language-injection/SKILL.md)
- [CRLF Injection](../crlf-injection/SKILL.md)
- [Extra Injection Types (SSI, LDAP, XPath)](./EXTRA_INJECTION_TYPES.md)
- [Request Smuggling](../request-smuggling/SKILL.md)
- [Prototype Pollution](../prototype-pollution/SKILL.md)
- [Type Juggling](../type-juggling/SKILL.md)
- [HTTP Parameter Pollution](../http-parameter-pollution/SKILL.md)
- [XSLT Injection](../xslt-injection/SKILL.md)
- [CSV Formula Injection](../csv-formula-injection/SKILL.md)

## Recommended Flow

1. First identify the final sink of the input
2. Then choose the topic skill that best matches that interpreter
3. Small payload samples and quick triage are merged into each main skill; no extra payload router is needed

## Related Categories

- [file-access-vuln](../file-access-vuln/SKILL.md)

© yaklang · MIT · yaklang/hack-skills

Similar skills

All skills for Security →
exploiting-api-injection-vulnerabilities mahipal Audits API parameters, headers, and request bodies for injection flaws like SQLi and SSRF. Helps assess backend input validation against OWASP API standards. CX Codex +1 311installs fix-security-vulnerabilities-with-strix usestrix This skill triages validated Strix findings, fixes their root causes, and runs Strix again to verify the result. Use it after a CLI or cloud scan. CX Codex +1 15,700installs security-fuzzing Eyadkelleh Provides curated SecLists fuzzing payloads for injection testing and input validation. Essential for authorized code audits, bug bounties, and CTFs. CX Codex +1 583installs secure-code-review zebbern This skill walks your code through all ten OWASP Top 10 categories and returns a report with vulnerable examples and working fixes. Useful before a release or when reviewing unfamiliar code. CX Codex +1 ★ 4,676repo stars tool-abuse-detection Tencent Runs dialogue probes against an agent to catch command execution, out-of-scope file reads and SSRF. Useful when the agent holds file, code or network tools. CX Codex +1 ★ 7,083repo stars security-guidance Alireza Rezvani Catches 12 common security flaws before Claude Code edits or writes files. Acts as a safety net when handling authentication, payment flows, or untrusted input. 551installs

From the same set93

business-logic-vuln Routes security testing toward business logic and state machine flaws. Focuses on race conditions, stacked discounts, quota bypasses, and workflow abuse. CX Codex +1 3,700installs recon-for-sec Routes initial reconnaissance for a new application, from attack-surface mapping to the next security testing path. CX Codex +1 3,700installs ios-pentesting-tricks A playbook for iOS app testing: keychain extraction, URL scheme hijacking, Universal Links abuse and runtime hooks. CX Codex +1 3,700installs cors-cross-origin-misconfiguration Guides testing of CORS misconfigurations, origin reflection, and credentialed API access. Useful when auditing cross-origin boundaries and cache policies. CX Codex +1 3,700installs kubernetes-pentesting A Kubernetes pentesting playbook: API server access, RBAC enumeration, service account token abuse, etcd, the Kubelet API and pod escape. CX Codex +1 3,700installs auth-sec Entry P1 category router for authentication and authorization testing. Helps choose the right audit path before digging into specific attacks. CX Codex +1 3,700installs api-authorization-and-bola A playbook for testing API authorization: reaching other users' objects, calling functions your role should not have, and writing hidden fields. CX Codex +1 3,700installs vm-and-bytecode-reverse A playbook for reversing hand-rolled virtual machines and bytecode: find the dispatcher, map opcodes, write a disassembler. CX Codex +1 3,700installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor