Command Injection

Detects untrusted input passed directly to operating system shell commands.

zakirkun Updated

File contents

Command Injection

Overview

Detects untrusted input passed directly to operating system shell commands.

Remediation

Avoid calling OS commands directly. Use built-in language APIs. If necessary, use exec arrays instead of shell strings.

zakirkun/ice-tea/tree/main/skills/web/command-injection commit 63c9a6c7cf

Frequently asked questions

npx skillmds@latest add zakirkun/command-injection