Skill
ai-ml-attacks
This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading",…
@allsmogView SkillSecurity
Skill
/sandbox-escapes
This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques
Install
$ npx -y skills add allsmog/vuln-scout --skill sandbox-escapes --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/sandbox-escapes
Context preview
The summary Claude sees to decide when to auto-load this skill.
This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques
SKILL.md
sandbox-escapes.SKILL.mdname: Sandbox Escapes description: This skill should be used when the user asks about "sandbox escape", "vm escape", "template injection to RCE", "SSTI exploitation", "vm2 bypass", "restricted execution bypass", "sandbox breakout", or needs to identify sandbox escape and template engine exploitation techniques during whitebox security review. version: 1.0.0
Sandbox Escape Techniques
Techniques for escaping restricted execution environments and exploiting template engines across Node.js, Python, and Ruby.
When to Use
Activate this skill during:
- Code review where `vm`, `eval`, or template engines process user input
- Identifying SSTI-to-RCE exploitation paths
- Analyzing restricted execution environments (vm2, RestrictedPython, $SAFE)
- Building exploit chains that leverage sandbox escapes
Language-Specific References
- **Node.js**: `nodejs-sandbox-escape.md` -- vm module bypass, vm2 CVEs, EJS/Pug injection, prototype pollution to RCE
- **Python**: `python-sandbox-escape.md` -- Jinja2 SSTI, Mako exploitation, serialization attacks, RestrictedPython bypass
- **Ruby**: `ruby-sandbox-escape.md` -- ERB injection, Slim/Haml exploitation, $SAFE bypasses, Marshal deserialization
Ships withvuln-scout
AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.
Get the whole plugin
Stats
24
Stars
4
Forks
Maintained
Maintenance
Python
Language
MIT
License
3mo ago
Last commit
6mo ago
Created
Repo: allsmog/vuln-scout
Other skills on vuln-scout.
@allsmogView SkillSkill
business-logic
This skill should be used when the user asks about "business logic", "workflow vulnerability", "trust boundary", "state machine", "authorization bypass",…
@allsmogView SkillSkill
cache-poisoning
This skill should be used when the user asks about "cache poisoning", "web cache deception", "CDN cache", "proxy cache", "nginx cache", "varnish", "cache key…
@allsmogView SkillSkill
cloud-native
This skill should be used when the user asks about "cloud security", "AWS security", "GCP security", "Azure security", "Kubernetes security", "IMDS", "instance…
@allsmogView SkillSkill
compliance-mapping
This skill should be used when the user asks about "compliance mapping", "PCI-DSS", "HIPAA", "SOC 2", "NIST CSF", "regulatory requirements", "compliance…
@allsmogView SkillSkill
cpg-analysis
This skill should be used when the user asks about "Code Property Graph", "CPG analysis", "Joern queries", "CPGQL", "data flow verification", "taint tracking…
@allsmogView Skill