{"slug":"jeremylongshore-detecting-command-injection-patterns","source_name":"jeremylongshore/detecting-command-injection-patterns","name":"Jeremylongshore/Detecting Command Injection Patterns","description":"Scan a source tree for command-injection vulnerable patterns:\nshell=True calls in Python subprocess, os.system / os.popen with\ninterpolated strings, Node child_process.exec with template\nliterals, Ruby backticks / Kernel#system / Kernel#exec with\ninterpolation, Go exec.Command with shell wrapping, PHP system /\npassthru / shell_exec / backticks with $-interpolation, Java\nRuntime.exec with concatenated args.\nUse when: pre-commit gate on code that calls out to shell utilities,\naudit of file-process","version":1,"lift":{"pass_rate_delta_pts":4.55,"pass_rate_pct":68.2,"total_cases":22,"passed_cases":15,"tokens_delta_pct":23,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-14T11:54:37.151763+00:00"},"skill_score":0.6818,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":4.55,"with_pass_pct":68.2,"without_pass_pct":63.6,"tokens_delta_pct":23,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-14T11:54:37.151763+00:00","run_id":"5102269b-9366-4589-9631-bbb46fe3e7d9","latest_attempt":{"id":"5102269b-9366-4589-9631-bbb46fe3e7d9","runner_model":"gemini-3.6-flash","overall_verdict":"mixed","completed_at":"2026-08-14T11:54:37.151763+00:00","gate":null},"version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"total_uses":0,"total_users":0,"manifest_hash":"39a95e2a4d4137b3d09eb465a0d65b3fdd9f98cdc224bec0209d19f208bfcbd2","install_name":"jeremylongshore-detecting-command-injection-patterns","version_id":"9aa0bfee-91be-4e45-ad4d-6e989208e979","body_sha256":"39a95e2a4d4137b3d09eb465a0d65b3fdd9f98cdc224bec0209d19f208bfcbd2","render_hash":"0a103bce42315b8f8b857d5e896129c4ee20790ef80bc0f7b66c561b39fbdefc","raw_url":"https://app.decimal.ai/s/jeremylongshore-detecting-command-injection-patterns/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/jeremylongshore-detecting-command-injection-patterns"}