check-command-injection - Command Injection Security Check
Analyzes PHP code for OS command injection vulnerabilities in shell functions
Tags
Updated: 2026-03-26Capabilities
Typical Inputs
Typical Outputs
What this skill does
- analyze PHP code
- detect shell_exec usage
- detect exec usage
- detect system usage
- detect passthru usage
- detect popen usage
- detect proc_open usage
- detect backtick operators
- detect argument injection
- detect environment variable injection
- detect filename injection
- mark vulnerable patterns
- generate security report
Inputs
- PHP source code
- PHP code files
Outputs
- Security report
- Vulnerability findings
- Detected command injection locations
Requirements
- PHP code files
- Regular expression matching