sammyboi81

Input Validation Injection — Development skill for Claude Code

Development community

Stop SQLi, XSS, command/template injection, SSRF, path traversal, XXE, deserialization.

How to install Input Validation Injection

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-input-validation-injection/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-input-validation-injection && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/input-validation-injection.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-input-validation-injection/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Input Validation Injection does

name: input-validation-injection description: Stop SQLi, XSS, command/template injection, SSRF, path traversal, XXE, deserialization. tags: core, web, injection

Validate at the boundary

Allowlist over denylist. Parse into typed objects (schema validation) and reject on failure; do not "clean" and continue.
Bound everything: length, size, depth, count, numeric range, time. Reject unknown fields (stops mass assignment).
Canonicalize before checking (Unicode normalization, URL deco

Alternatives in Development

Oob — Out-of-band orchestrator — confirm BLIND SSRF/XXE/SQLi/RCE/Log4Shell by correlating interactsh callbacks to th 4.5k ★
Claude Supermemory — Persistent memory across sessions and projects using Supermemory 2.3k ★
Code Graph MCP — AST knowledge graph MCP server for Claude Code — semantic search, call graph traversal, HTTP route tracing, im 70 ★