← the swarm
INJECTION & TAINT
TAINT
Follows every untrusted input across files to the sink it reaches.
3 findings in sample scan6 CWE classes
// WHAT IT HUNTS
- SQL injection
- Command injection
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
- Path traversal
- LLM prompt injection
- Template injection (SSTI)
// CWE COVERAGE
CWE-89CWE-78CWE-79CWE-918CWE-22CWE-1336
Traces untrusted input to dangerous sinks — SQLi, command injection, XSS, SSRF.
// IN THE SAMPLE SCAN
What TAINT found in acme/api-gateway
Point TAINT at your code.
Every scan runs the full swarm and returns a single report.