# SQL Injection Prevention

> Always use parameterized queries or prepared statements Use when implementing security best practices. Security category skill.

- Skill: `majiayu000/sql-injection-prevention` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/sql-injection-prevention`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/sql-injection-prevention/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/majiayu000/sql-injection-prevention

---


# SQL Injection Prevention

Always use parameterized queries or prepared statements. Use ORMs or query builders that handle parameterization automatically. Never build SQL strings through concatenation with user input. Apply principle of least privilege to database accounts. Validate and sanitize input even when using parameterized queries as defense in depth.