command-injection-anti-pattern

Features and purpose

Security anti-pattern for OS Command Injection vulnerabilities (CWE-78). Use when generating or reviewing code that executes shell commands, runs system processes, or handles user input in command-line operations. Detects shell string concatenation and recommends argument arrays.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.