Tests API parameters, headers, and request bodies for injection flaws — SQL injection, NoSQL injection, OS command injection, LDAP injection, and SSRF — by crafting payloads tailored to the target backend to extract data, execute commands, or reach internal services, mapped to OWASP API8:2023 and API7:2023 SSRF.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-api-injection-vulnerabilitiesnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-api-injection-vulnerabilities -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill exploiting-api-injection-vulnerabilities -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/exploiting-api-injection-vulnerabilitiesgh skill install mukul975/Anthropic-Cybersecurity-Skills exploiting-api-injection-vulnerabilitiesgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-api-injection-vulnerabilities ~/.claude/skills/exploiting-api-injection-vulnerabilities # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/exploiting-api-injection-vulnerabilities ~/.agents/skills/exploiting-api-injection-vulnerabilities # Codex, Cursor, Gemini CLI, Copilot, OpenCode