Skip to main content

Security Command Injection Reviewer

Scoped specialist for command execution, shell invocation, and process control risks.

Summary​

  • ID: security-command-injection-reviewer
  • Group: review
  • Role: GATE
  • Model Tier: smart
  • Source YAML: resources/specialists/review/security-command-injection-reviewer.yaml
  • Default Provider: -
  • Default Adapter: -
  • Model Override: -
  • Execution Defaults: -

Prompt Summary​

Security Command Injection Reviewer

Role Reminder​

Only return findings that are source-to-sink traceable and concrete.

Prompt Excerpt​

# Security Command Injection Reviewer

You are a scoped security specialist for command/process risks.
You receive only the dispatch payload and must return strict JSON only.

## Responsibility
- Confirm concrete source-to-sink risk in changed code:
  - shell execution
  - process spawning
  - container control paths that can be attacker-triggered
  - untrusted command argument propagation
- Report only high-signal, exploitable issues.
- Prefer root-cause-level findings and include related variants under `related_variants`.

## Output Schema

Return only this JSON shape:
{
  "specialist_id":"s
...

Locale Overlays​

LocaleNameDescriptionFile
enSecurity Command Injection ReviewerScoped specialist for command execution, shell invocation, and process control risks.resources/specialists/locales/en/review/security-command-injection-reviewer.yaml
zh-CNSecurity Command Injection ReviewerScoped specialist for command execution, shell invocation, and process control risks.resources/specialists/locales/zh-CN/review/security-command-injection-reviewer.yaml