injection

Sterne2.737

Forks699

Aktualisiert1. Juni 2026 um 15:28

Flag injection vectors from user-supplied strings — exec, SSRF, fmt.Sprintf-built selectors/URLs, template rendering, query concatenation (CWE-78, CWE-94, CWE-918).

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

kubernetes-sigs

kubernetes-sigs/kueue

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

InformationssicherheitsanalystenInformatik- und Mathematikberufe·SOC 15-1212

SKILL.md

readonly

name	injection
description	Flag injection vectors from user-supplied strings — exec, SSRF, fmt.Sprintf-built selectors/URLs, template rendering, query concatenation (CWE-78, CWE-94, CWE-918).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Injection from User-Supplied Strings

os/exec / exec.Command with user-controlled arguments (CWE-78, CWE-94).
http.Get / http.NewRequest to URLs built from CR fields (CWE-918 SSRF). Container image refs, init-container pull specs, and webhook target URLs count as untrusted.
fmt.Sprintf building YAML, JSON, label selectors, field paths, or API server URLs from user input. Require typed marshalling and labels.SelectorFromSet.
Server-side template rendering of annotation/label values (CWE-94).
SQL-like or query-language string concatenation against any external store.

Mehr aus diesem Repository

gleiches Repository

was-cluster

kubernetes-sigs/kueue

Build and manage a kind cluster for Workload-Aware Scheduling (WAS) e2e tests. Use when the user wants to set up, run tests against, or tear down a WAS test cluster built from Kubernetes main.

2026-07-102.7k

avoidable-complexity

kubernetes-sigs/kueue

Flag solutions more elaborate than the problem requires — complexity that exists only because the author reached for a pattern.

2026-06-012.7k

duplicated-logic

kubernetes-sigs/kueue

Flag identical (or near-identical) blocks across types/adapters/call sites that should live in a shared helper — and newly extracted helpers with only one caller.

2026-06-012.7k

illogical-structure

kubernetes-sigs/kueue

Flag code organization that a future maintainer will struggle to follow, modify, or extend.

2026-06-012.7k

misplaced-logic

kubernetes-sigs/kueue

Flag code put somewhere a reader would not expect to find it — cleanup scattered across callers, validation deep in business logic.

2026-06-012.7k

nonsensical-decisions

kubernetes-sigs/kueue

Flag unnecessary indirection, mismatched abstractions, or confusing data flow that obscures what the code is doing.

2026-06-012.7k

name	injection
description	Flag injection vectors from user-supplied strings — exec, SSRF, fmt.Sprintf-built selectors/URLs, template rendering, query concatenation (CWE-78, CWE-94, CWE-918).
license	Apache-2.0
metadata	{"copyright":"The Kubernetes Authors"}

Skill: Injection from User-Supplied Strings

os/exec / exec.Command with user-controlled arguments (CWE-78, CWE-94).
http.Get / http.NewRequest to URLs built from CR fields (CWE-918 SSRF). Container image refs, init-container pull specs, and webhook target URLs count as untrusted.
fmt.Sprintf building YAML, JSON, label selectors, field paths, or API server URLs from user input. Require typed marshalling and labels.SelectorFromSet.
Server-side template rendering of annotation/label values (CWE-94).
SQL-like or query-language string concatenation against any external store.