Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLIAbout this skill
Turn suspected OS command injection (a parameter that lands in a shell or a child process) into proof of remote code execution via an OAST callback, plus one safe demonstration of follow-on impact (read a file, list users, env dump). Use when a parameter feeds an exec/spawn/system call, when payloads with $(), , ;, |, && cause response differences, or when audit flags CWE-78 / CWE-77. Never sends destructive commands.
Quick start
- Copy the install prompt. Use the green button above this README.
- Send it to your agent. Paste it into your coding agent’s chat and send.
- Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Review, license & listing details
This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.
Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.
1 potential finding · Scanned 11/4/2026 · Scanner 0.2.1
- critical: environment exfiltration — SKILL.md, line 87
Content SHA-256: 2ca8e173e495077725d327128e273b7f3cb0db04edacfec613959e4d9bc13af4
About this listing
- Category
- General
- Reported license
- Not specified
- Listing language (estimated)
- English
- Review status
- Not individually reviewed
- Agent compatibility
- Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.