command-injection-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-only resource focused on security education. It provides examples of vulnerable code (anti-patterns) and secure alternatives for Python, JavaScript, and Java to help developers avoid OS Command Injection (CWE-78).
- [SAFE]: References to external sites like OWASP, CWE, and GitHub are for informational and source attribution purposes. No executable code or remote dependencies are present.
- [SAFE]: While the skill contains common attack payloads (e.g., shell metacharacters and directory traversal commands), they are explicitly used as examples of malicious input to test against, rather than instructions to be executed.
Audit Metadata