Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/transilienceai/communitytools/injectionnpx skills add transilienceai/communitytools --skill injectiongit clone --depth 1 https://github.com/transilienceai/communitytoolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/transilienceai/communitytools/injection)<a href="https://agentmods.dev/skills/transilienceai/communitytools/injection"><img src="https://agentmods.dev/badge/skills/transilienceai/communitytools/injection.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00028 | $0.00416 |
| Opus 5 | $0.00014 | $0.00208 |
| Sonnet 5 | $0.00006 | $0.00083 |
| Haiku 4.5 | $0.00003 | $0.00042 |
Grade A, and why
injection scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Injection
Test for injection vulnerabilities across all input vectors. Covers SQL, NoSQL, Command, SSTI, XXE, and LDAP injection.
Techniques
| Type | Key Vectors |
|---|---|
| SQL Injection | In-band (union, error), Blind (boolean, time), Out-of-band |
| NoSQL Injection | Operator injection, JavaScript injection, aggregation pipeline |
| Command Injection | OS command separators, blind techniques, out-of-band |
| SSTI | Template engine detection, sandbox escape, RCE chains |
| XXE | Entity expansion, SSRF via XXE, blind XXE, parameter entities |
| LDAP/XPath | Filter manipulation, authentication bypass |
Workflow
- Identify injection points (parameters, headers, cookies, JSON fields)
- Detect injection type with minimal probes
- Exploit with context-appropriate payloads
- Escalate (data extraction, RCE, file read)
- Capture evidence and write PoC
Reference
reference/sql-injection*.md- SQL injection techniquesreference/nosql-injection*.md- NoSQL injection techniquesreference/os-command-injection*.md- OS command injectionreference/ssti*.md- Server-side template injectionreference/xxe*.md- XML external entity injectionreference/ldap-injection-quickstart.md- LDAP filter injection: detection, auth bypass, blind boolean extraction via(description=PREFIX*)chainingreference/xpath-injection-quickstart.md- XPath injection (CWE-643): lxml/Java/Node sinks,' or '1'='1' or 'a'='bboolean oracle, blind char-by-char extraction recipe
What ships with it
45 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- reference/INDEX.md 3.6 KB
- reference/injection-principles.md 6.4 KB
- reference/ldap-injection-quickstart.md 13 KB
- reference/nosql-injection-advanced.md 5.7 KB
- reference/nosql-injection-cheat-sheet.md 5.9 KB
- reference/nosql-injection-quickstart.md 4.5 KB
- reference/nosql-injection-resources.md 5.5 KB
- reference/os-command-injection-cheat-sheet.md 6.9 KB
- reference/os-command-injection-quickstart.md 4.4 KB
- reference/scenarios/code-injection/bash-symbolic-only-bypass.md 6.5 KB
- reference/scenarios/code-injection/php-preg-replace-e-modifier.md 2.1 KB
- reference/scenarios/code-injection/python-eval-format-string.md 3.7 KB
- reference/scenarios/nosql/cassandra-cql.md 4.5 KB
- reference/scenarios/nosql/elasticsearch-script-injection.md 4.0 KB
- reference/scenarios/nosql/mongo-aggregation-pipeline.md 4.4 KB
- reference/scenarios/nosql/mongo-operator-injection.md 4.1 KB
- reference/scenarios/nosql/mongo-syntax-injection.md 3.7 KB
- reference/scenarios/nosql/mongo-type-confusion.md 4.3 KB
- reference/scenarios/nosql/mongo-where-jsinjection.md 5.5 KB
- reference/scenarios/nosql/redis-ssrf-gopher.md 5.6 KB
- reference/scenarios/sql/auth-bypass.md 2.9 KB
- reference/scenarios/sql/boolean-blind.md 3.6 KB
- reference/scenarios/sql/error-based.md 3.4 KB
- reference/scenarios/sql/header-injection.md 3.4 KB
- reference/scenarios/sql/out-of-band.md 3.3 KB
- reference/scenarios/sql/per-dbms-mssql.md 5.0 KB
- reference/scenarios/sql/per-dbms-mysql.md 4.7 KB
- reference/scenarios/sql/per-dbms-oracle.md 5.5 KB
- reference/scenarios/sql/per-dbms-postgres.md 4.1 KB
- reference/scenarios/sql/second-order.md 4.0 KB
- reference/scenarios/sql/stacked-queries.md 4.9 KB
- reference/scenarios/sql/time-based-blind.md 3.9 KB
- reference/scenarios/sql/union-based.md 4.0 KB
- reference/scenarios/sql/waf-bypass.md 5.1 KB
- reference/scenarios/sql/where-clause-filter-bypass.md 3.1 KB
- reference/scenarios/ssti/double-render-quote-free-bypass.md 5.5 KB
- reference/sql-injection-advanced.md 9.8 KB
- reference/sql-injection-quickstart.md 8.3 KB
- reference/ssti-advanced.md 5.6 KB
- reference/ssti-cheat-sheet.md 6.8 KB
- reference/ssti-quickstart.md 4.4 KB
- reference/ssti-resources.md 5.0 KB
- reference/xpath-injection-quickstart.md 5.5 KB
- reference/xxe-cheat-sheet.md 6.6 KB
- reference/xxe-quickstart.md 4.7 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 38 lines · 28 tokens per session scan A f3bd3c43f708
injection is a skill published in the GitHub repository transilienceai/communitytools (509 stars, last pushed 1mo ago), licensed MIT. It adds 28 tokens to every session and 416 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
pentester-playwright
Phases 1b/3/4 authorized browser automation — SPA recon, multi-role auth, route/API catalog, PoC screenshots, Evidence landing (scoped proxy). Skill-gate read for web phases. Use when Phase 1b/3/4 web work, JS-rendered SPA, real browser needed, HAR/network capture, or Playwright PoC evidence.
osint-recon
Phase 1 conditional OSINT depth — four-dimension model (server→site→domain→people; people is conditional). Skill-gate companion to pentester-enum-services / pentester-recon. Use for passive OSINT depth, full recon dimensions, author tracking, not as Phase 0/Schema replacement.
pentester-exploit
Phase 4 exploitation — PoC construction, exploit-db/msf search, safe verification. Required Skill-gate read at Phase 4. Use when starting Phase 4, exploitation, exploit, PoC, exploit-db, msf, Metasploit, or payload delivery.
pentester-recon
Phase 1 intelligence recon methodology — passive+active recon, stack fingerprint, attack-surface map. Required Skill-gate read at Phase 1 (with pentester-enum-services). Use when starting Phase 1, intelligence gathering, recon, reconnaissance, OSINT prep, target profiling, or attack surface mapping.
pentester-toolkit
Provision the pinned pentest toolset via DotSlash for the current scanenv (host-kali or kali-target-${ID}). Adapter, not a tool wrapper.
pentester-waf-bypass
Phase 4 conditional — WAF/filter bypass for authorized CTF/range/pentest when payloads are blocked. Use at Phase 4 if blocked, or when user mentions WAF bypass, filter evasion, SQL/XSS/command-injection bypass, or security filter analysis.