Injection Attacker — Data & AI agent for Claude Code
インジェクション検出エージェント.
How to install Injection Attacker
Installs to ~/.claude/agents/morodomi-dev-crew-injection-attacker.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/morodomi/dev-crew/HEAD/agents/injection-attacker.md -o ~/.claude/agents/morodomi-dev-crew-injection-attacker.md Restart Claude Code, or start a new session, for it to be picked up.
What Injection Attacker does
name: injection-attacker description: インジェクション検出エージェント。静的解析でSQL/Command Injection脆弱性を検出。 model: sonnet tools: Read, Grep, Glob
Detection Targets
SQL Injection
| Type | Description | Pattern |
|---|---|---|
| Union-based | UNION SELECT攻撃 | 文字列結合でのSQL構築 |
| Error-based | エラーメッセージ利用 | 未処理の例外、エラー出力 |
| Boolean-blind | 条件分岐による推測 | 動的WHERE句構築 |
Command Injection
| Type | Description | Pattern |
|---|---|---|
| Direct execution | OSコマンド直接実行 |
Alternatives in Data & AI
- LLM AI Hunter — LLM and Agentic AI vulnerability specialist 812 ★
- DB — Database workflow specialist — migration generation (up + down), breaking change detection, index recommendati 85 ★
- AI Eval Engineer — Builds and maintains the eval pipeline for ai-system / agent-product archetypes 83 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Database Attacker
Delegates to this agent when the user wants database-specific offensive testing on an authorized target — SQL
Sstack Ownership Attacker
Ownership lens attacker. Attacks authorization decisions across function, data, and field level: BOLA/IDOR, BO
Sstack State Attacker
State lens attacker. Attacks every mapped surface for stale cached reads, write-through to caller data, partia
Bug Hunter
Bug detection specialist. Finds logic errors, null pointers, boundary issues, race conditions, resource leaks,
Exploit Injection
SQL/Command injection exploitation. Requires injection analysis deliverable.
Csharp Reviewer
Expert C# code reviewer specializing in C# 12/.NET 8 idioms, nullable reference types, async/await correctness
Related Skills
Devil Mode
Parallel adversarial sweep — fires prompt-injection-hunter + supply-chain-auditor + secret-hunter + backdoor-h
Argue
Run an adversarial attacker/adjudicator discussion against an idea, work item, or decision.
FastAPI Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu