Detects bugs where untrusted input reaches a sink that leaks data beyond its intended scope. Covers SSRF (including cloud metadata, internal services, image proxies), path traversal and archive zip-slip, SQL/NoSQL injection enabling bulk reads, XXE file read, response serializers over-exposing internal fields, verbose error pages, logs capturing secrets, and CSV/formula injection in exports.
安装
npx skills add getsentry/warden-skills --skill wrdn-data-exfilnpx skills add getsentry/warden-skills --skill wrdn-data-exfil -a claude-code -gnpx skills add getsentry/warden-skills --skill wrdn-data-exfil -a codex -ggemini skills install https://github.com/getsentry/warden-skills.git --path skills/wrdn-data-exfilgh skill install getsentry/warden-skills wrdn-data-exfilgit clone --depth 1 https://github.com/getsentry/warden-skills /tmp/getsentry__warden-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/getsentry__warden-skills/skills/wrdn-data-exfil ~/.claude/skills/wrdn-data-exfil # Claude Code
cp -R /tmp/getsentry__warden-skills/skills/wrdn-data-exfil ~/.agents/skills/wrdn-data-exfil # Codex, Cursor, Gemini CLI, Copilot, OpenCode