Results for “shell-injection”

Imported skill shell from langchain

NoSQL injection playbook. Use when MongoDB-style operators, JSON query objects, flexible search filters, or backend query DSLs may allow data or logic abuse.

Designs chaos experiments, creates failure injection frameworks, and facilitates game day exercises for distributed systems — producing runbooks, experiment manifests, rollback procedures, and post-mortem templates.

JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especially via Log4j2, Spring, or any code path reaching InitialContext.lookup().

Apply strict-mode Bash scripting conventions: minimal validation, concise logic, executable scripts, and no unnecessary comments or echoes.

Scaffolds a MariaDB Shell plugin folder with a correctly documented init.py or init.js, following the plugin registrar's conventions for decorators, docstrings, and loading paths.

Write defensive, portable Bash scripts for automation, CI/CD, and system utilities, with strict error handling, safe argument parsing, and testing.

Run a sandboxed shell command with timeout and allowlist

Activates for any shell command or file read, providing a shell command and file read skill.

Writes and reviews defensive Bash scripts for automation, CI/CD, and system utilities, emphasizing safety, portability, and testability.

SKILL.md — 硅基生命训练学·索引技能

PUA Shot — compact all-in-one PUA reference for explicit injection into sub-agents or short sessions. Strong flavor, same evidence-first behavior.

FREE — God-tier long-context memory for AI agents. Injects 500K-1M clean tokens, auto-summarizes with tone/intent preservation, compresses 14-turn history into 800 tokens.

Write defensive, portable Bash scripts for automation, CI/CD, and system utilities, with strict error handling, safe argument parsing, and testing via Bats and ShellCheck.

Guides using the Fish interactive shell, covering autosuggestions, universal variables, web configuration, and best practices for interactive use.

Runs project tests, stages and commits changes with a conventional message, then rebases and pushes to the current branch, stopping on any failure.

PUA Shot — compact all-in-one PUA reference for explicit injection into sub-agents or short sessions. Strong flavor, same evidence-first behavior.

Detect and exploit Server-Side Template Injection vulnerabilities across multiple template engines including Jinja2, Twig, Freemarker, and Velocity, with payloads for sandbox escape and remote code execution. Includes detection methodology, bypass techniques, and fix patterns.