← ClaudeAtlas

injection-checkinglisted

Entry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injection, and NoSQL injection workflows based on how attacker-controlled input is consumed.
SecurityTalent/bugskill-ai · ★ 12 · AI & Automation · score 79
Install: claude install-skill SecurityTalent/bugskill-ai
# Injection Testing Router This is the routing entry point when input reaches a dangerous interpreter or execution environment. After confirming this is an injection-class issue, use it to decide whether it is mainly browser context, database, template engine, server-side requests, XML parsing, or system commands. ## When to Use - Input reaches HTML, JS, SQL, templates, URL fetchers, XML parsers, or shell - You have not yet decided whether to start with XSS, SQLi, SSRF, XXE, SSTI, CMDi, or NoSQL - You need to choose the correct deep-topic skill based on input flow ## Skill Map - [XSS Cross Site Scripting](../xss-cross-site-scripting/SKILL.md) - [SQLi SQL Injection](../sqli-sql-injection/SKILL.md) - [SSRF Server Side Request Forgery](../ssrf-server-side-request-forgery/SKILL.md) - [XXE XML External Entity](../xxe-xml-external-entity/SKILL.md) - [SSTI Server Side Template Injection](../ssti-server-side-template-injection/SKILL.md) - [CMDi Command Injection](../cmdi-command-injection/SKILL.md) - [NoSQL Injection](../nosql-injection/SKILL.md) - [Deserialization Insecure](../deserialization-insecure/SKILL.md) - [JNDI Injection](../jndi-injection/SKILL.md) - [Expression Language Injection](../expression-language-injection/SKILL.md) - [CRLF Injection](../crlf-injection/SKILL.md) - [Extra Injection Types (SSI, LDAP, XPath)](./EXTRA_INJECTION_TYPES.md) - [Request Smuggling](../request-smuggling/SKILL.md) - [Prototype Pollution](../prototype-pollution/SKILL.md) - [Type Juggling](