npx skills add yaklang/hack-skills --skill expression-language-injection
wgpsec/aboutsecurity
expression-language-injection
表达式语言(EL)注入方法论。当目标使用 Spring(SpEL)、Struts2(OGNL)、Confluence(OGNL)、JSP/JSF(Java EL) 且存在用户可控的表达式求值时使用。覆盖多语法探测与区分(${7*7}/#{7*7}/%{7*7})、SpEL…
Installation
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
Four-step image referring-expression pipeline: turns images plus KITTI bounding-box labels into…
1.5K installsUse when writing or reviewing n8n expressions (`{{...}}` syntax), `$json` / `$node` references,…
1.2K installsValidate n8n expression syntax and fix common errors. Use when writing n8n expressions, using {…
5.8K installs>- Expression Language injection playbook. Use when Java EL, SpEL, OGNL, or MVEL expressions ma…
2.9K installsRetrieve gene expression and omics datasets from ArrayExpress and BioStudies with gene disambig…
388 installsUse when writing or reviewing n8n expressions (`{{...}}` syntax), `$json` / `$node` references,…
358 installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Also listed on
Alternate registries and mirrors of this skill.
Repository health
master
History
- First seen on skills.sh
- First recorded snapshot · 16 installs