Detects bugs where untrusted input reaches a sink that produces code or command execution on the server. Covers command/shell injection, unsafe deserialization, server-side template injection, eval/Function/vm reached by user data, XXE-to-RCE gadgets, and prototype pollution that lands on a code-executing sink.
Install
npx skills add getsentry/warden-skills --skill wrdn-code-executionnpx skills add getsentry/warden-skills --skill wrdn-code-execution -a claude-code -gnpx skills add getsentry/warden-skills --skill wrdn-code-execution -a codex -ggemini skills install https://github.com/getsentry/warden-skills.git --path skills/wrdn-code-executiongh skill install getsentry/warden-skills wrdn-code-executiongit clone --depth 1 https://github.com/getsentry/warden-skills /tmp/getsentry__warden-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/getsentry__warden-skills/skills/wrdn-code-execution ~/.claude/skills/wrdn-code-execution # Claude Code
cp -R /tmp/getsentry__warden-skills/skills/wrdn-code-execution ~/.agents/skills/wrdn-code-execution # Codex, Cursor, Gemini CLI, Copilot, OpenCode