cmdi-command-injection

Guides command-injection testing with payload examples, blind-detection techniques, and vulnerable code patterns.

When to use it

Use when user input may reach shell commands, process execution, converters, import pipelines, or blind out-of-band command sinks.

It changes how the agent tests suspected command-injection points, using timing probes and context-specific payloads to assess injection.