Two Security Claude Code skills, side by side. Pick the right skill for your workflow with a side-by-side look at metadata, sample code, and install commands.
| Name | detecting-command-injection-patterns | implement |
|---|---|---|
| Description | Scan a source tree for command-injection vulnerable patterns: shell=True calls in Python subprocess, os.system / os.popen with interpolated strings, Node child_process.exec with template literals, Ruby backticks /… | Full-power feature implementation using parallel subagents for backend, frontend, testing, and security. Coordinates architecture design, code generation, test coverage, and quality verification in a single workflow… |
| Category | Security | Security |
| Sub-category | threat-hunting | security-misc |
| Tags | lang:python type:audit | — |
| Author | Jeremy Longshore <[email protected]> | OrchestKit |
| License | MIT | MIT |
| Install | /add-skill detecting-command-injection-patterns | /add-skill implement |
python3 ${CLAUDE_PLUGIN_ROOT}/skills/detecting-command-injection-patterns/scripts/scan_cmdi.py /path/to/repo/ork:implement user authentication
/ork:implement --model=opus real-time notifications
/ork:implement dashboard analyticsdetecting-command-injection-patterns — Scan a source tree for command-injection vulnerable patterns: shell=True calls in Python subprocess, os.system / os.popen with interpolated strings, Node child_process.exec with template literals, Ruby backticks /…
implement — Full-power feature implementation using parallel subagents for backend, frontend, testing, and security. Coordinates architecture design, code generation, test coverage, and quality verification in a single workflow…
Both are free to install. If you're unsure, install both — Claude Code skills are isolated by filename and only collide if their trigger phrases overlap (rare). The richest signal is the SKILL.md body itself — open both skill pages and read the first paragraph of each.
See all Claude Code skill comparisons · Browse all Security skills · Top 100
SKILL.md files, not affiliated with, endorsed by, or sponsored by Anthropic.