SkillsAdd

yaklang/hack-skills

injection-checking

>- Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injection, and NoSQL injection workflows based on how attacker-controlled input is consumed.

All-time #4293 Trending #7617 First seen Apr 8, 2026
8-week activity · all time api

Installation

$ npx skills add yaklang/hack-skills --skill injection-checking
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

golang-dependency-injection Similar name
samber/cc-skills-golang

Comprehensive guide for dependency injection (DI) in Golang. Covers why DI matters (testability…

36.9K installs
spring-boot-dependency-injection Similar name
giuseppe-trisciuoglio/developer-kit

Provides dependency injection patterns for Spring Boot projects, including constructor-first de…

2.8K installs
maui-dependency-injection Similar name
dotnet/skills

Guidance for configuring dependency injection in .NET MAUI apps — service registration in MauiP…

1.5K installs
dependency-injection Similar name
codewithmukesh/dotnet-claude-kit

Dependency injection patterns for .NET 10. Covers service lifetimes, keyed services, the decora…

23 installs
sql-injection-testing Similar name
sickn33/agentic-awesome-skills

Execute comprehensive SQL injection vulnerability assessments on web applications to identify d…

691 installs
dependency-injection-patterns Similar name
aaronontheweb/dotnet-skills

Organize DI registrations using IServiceCollection extension methods. Group related services in…

582 installs

Also in this package

Other skills from yaklang/hack-skills · top by installs.

npx skills add yaklang/hack-skills
hack 3.5K android-pentesting-tricks 3.3K sqli-sql-injection 3.3K code-obfuscation-deobfuscation 3.3K api-sec 3.2K xss-cross-site-scripting 3.2K recon-and-methodology 3.2K business-logic-vulnerabilities 3.2K ssrf-server-side-request-forgery 3.1K waf-bypass-techniques 3.1K

Browse all from yaklang/hack-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 2.1K
License LICENSE
Default branch main
Open issues 0
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 2,277 B
  • docs SUMMARY.md 227 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 3,030 installs

SKILL.md

Injection Testing Router

This is the routing entry point when input reaches a dangerous interpreter or execution environment.

After confirming this is an injection-class issue, use it to decide whether it is mainly browser context, database, template engine, server-side requests, XML parsing, or system commands.

When to Use

  • Input reaches HTML, JS, SQL, templates, URL fetchers, XML parsers, or shell
  • You have not yet decided whether to start with XSS, SQLi, SSRF, XXE, SSTI, CMDi, or NoSQL
  • You need to choose the correct deep-topic skill based on input flow

Skill Map

  • [XSS Cross Site Scripting](../xss-cross-site-scripting/SKILL.md)
  • [SQLi SQL Injection](../sqli-sql-injection/SKILL.md)
  • [SSRF Server Side Request Forgery](../ssrf-server-side-request-forgery/SKILL.md)
  • [XXE XML External Entity](../xxe-xml-external-entity/SKILL.md)
  • [SSTI Server Side Template Injection](../ssti-server-side-template-injection/SKILL.md)
  • [CMDi Command Injection](../cmdi-command-injection/SKILL.md)
  • [NoSQL Injection](../nosql-injection/SKILL.md)
  • [Deserialization Insecure](../deserialization-insecure/SKILL.md)
  • [JNDI Injection](../jndi-injection/SKILL.md)
  • [Expression Language Injection](../expression-language-injection/SKILL.md)
  • [CRLF Injection](../crlf-injection/SKILL.md)
  • [Extra Injection Types (SSI, LDAP, XPath)](./EXTRAINJECTIONTYPES.md)
  • [Request Smuggling](../request-smuggling/SKILL.md)
  • [Prototype Pollution](../prototype-pollution/SKILL.md)
  • [Type Juggling](../type-juggling/SKILL.md)
  • [HTTP Parameter Pollution](../http-parameter-pollution/SKILL.md)
  • [XSLT Injection](../xslt-injection/SKILL.md)
  • [CSV Formula Injection](../csv-formula-injection/SKILL.md)

Recommended Flow

  1. First identify the final sink of the input
  2. Then choose the topic skill that best matches that interpreter
  3. Small payload samples and quick triage are merged into each main skill; no extra payload router is needed

Related Categories

  • [file-access-vuln](../file-access-vuln/SKILL.md)