domains / families / security / sast-xxe

sast-xxe

authentic

Detect XML External Entity (XXE) vulnerabilities in a codebase using a three-phase approach: recon (find XML parsing sites without external-entity hardening), batched verify (trace user input to each site in parallel subagents, 3 sites each), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/xxe-results.md. Use when asked to find XXE or XML injection bugs.

When to use

• find XXE bugs
• find XML injection bugs
• detect XML External Entity vulnerabilities
• trace user input to XML parsing sites
• consolidate batch results

When not to use

• XSS via XML
• SSRF via non-XML
• XML parsing of fully server-controlled data
• Safe parsers that disable external entities by default

Skill page

Source