taint-tracking-by-hand

仓库创建 2026年7月26日最近提交 18 小时前SkillHot 收录 3 小时前

▸ 精选理由

适合代码审计与自动化审查定位未中和的数据流。

这个 Skill 做什么

指导手工沿输入到输出追踪污点以发现注入类漏洞。

手工沿着代码把“脏数据”从入口到危险点跟一遍，找出注入类漏洞。代码审查时用——从 source 到 sink 查看数据流、判断有没有被正确中和或阻断，能发现自动工具漏掉的语义或控制流问题。强调人为分析的路径和上下文，帮你判断某条路径是否真能被利用。

▸ 展开 SKILL.md 英文原文

Use when reviewing source for injection-class bugs — following untrusted input from where it enters (source) to where it does damage (sink) to decide if a path is exploitable.

研究检索安全审计污点跟踪代码审查通用

Stars

Forks

仓库内 Skill

积累中

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/jihedbfr-art/cyber-skills/main/skills/10-secure-code-review/01-taint-tracking-by-hand/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/jihedbfr-art/cyber-skills/main/skills/10-secure-code-review/01-taint-tracking-by-hand/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

## Purpose

Most serious code-level bugs are the same shape: untrusted data reaches a dangerous operation without being neutralised on the way. Taint tracking is the method for finding them by reading — start at a **source** (where attacker-controlled data enters), follow it to a **sink** (where it can cause harm), and check whether anything sanitises it in between. This skill is the core technique the rest of the secure-code-review domain builds on.

## When to use it

Reviewing a PR or auditing a codebase for injection-class flaws (SQLi, command injection, XSS, path traversal, SSRF, deserialization). It's how you turn "this looks risky" into "this input reaches this sink unsanitised, here'

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有