SkillsAdd

wgpsec/aboutsecurity

cot-injection

思维链 (Chain-of-Thought) 注入攻击方法论。当目标系统使用 ReAct/CoT 框架进行多步推理、 Agent 依赖中间推理结果做决策、或需要测试思维链完整性时触发。 覆盖: 思维链干扰注入(伪造中间 Agent 结果)、思维链操纵注入(跳过验证步骤直接调度敏感操作)、 查询注入(在数据查询 Agent 中注入恶意查询语句)。

First seen Apr 22, 2026

Installation

$ npx skills add https://github.com/wgpsec/aboutsecurity
View on skills.sh ↗ GitHub repository ↗
Feature your product here Skill page unit · reach builders installing agent skills View pricing →

Summary

  • 思维链 (Chain-of-Thought) 注入攻击方法论。当目标系统使用 ReAct/CoT 框架进行多步推理、
  • Agent 依赖中间推理结果做决策、或需要测试思维链完整性时触发。
  • 覆盖: 思维链干扰注入(伪造中间 Agent 结果)、思维链操纵注入(跳过验证步骤直接调度敏感操作)、
  • 查询注入(在数据查询…

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

aws-fault-injection-service Similar name
aws/agent-toolkit-for-aws

Plans, builds, runs, and analyzes fault injection experiments with AWS Fault Injection Service …

31 installs
golang-dependency-injection Similar name
samber/cc-skills-golang

Comprehensive guide for dependency injection (DI) in Golang. Covers why DI matters (testability…

267 installs
sqli-sql-injection Similar name
yaklang/hack-skills

>- SQL injection playbook. Use when input reaches SQL queries, authentication logic, sorting, f…

19 installs
spring-boot-dependency-injection Similar name
giuseppe-trisciuoglio/developer-kit

Provides dependency injection patterns for Spring Boot projects, including constructor-first de…

7 installs
injection-checking Similar name
yaklang/hack-skills

>- Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XX…

18 installs
llm-prompt-injection Similar name
yaklang/hack-skills

>- LLM prompt injection playbook. Use when testing AI/LLM applications for direct injection, in…

18 installs

Also in this package

Other skills from wgpsec/aboutsecurity · top by installs.

npx skills add https://github.com/wgpsec/aboutsecurity
prompt-jailbreak 62 ctf-reverse 46 ad-domain-attack 45 nuclei-scan 45 efficiency-rules 45 report-generate 43 ctf-web-recon 43 ctf-crypto 43 ctf-pwn 41 passive-recon 41

Browse all from wgpsec/aboutsecurity

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 1.7K
Default branch master
Open issues 0
Status Active

History

  1. First seen on skills.sh
  2. First recorded snapshot · 33 installs