How do I install the Detecting SQL Injection Vulnerabilities skill?

Run npx skillmds add tools-only/detecting-sql-injection-vulnerabilities-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Detecting SQL Injection Vulnerabilities safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Detecting SQL Injection Vulnerabilities?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Detecting SQL Injection Vulnerabilities free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Detecting SQL Injection Vulnerabilities?

tools-only (@tools-only) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Detecting SQL Injection Vulnerabilities by tools-only

Name: Detecting SQL Injection Vulnerabilities
Rating: 4.2 (5 reviews)
Author: tools-only

Detecting SQL Injection Vulnerabilities

Detect and analyze SQL injection vulnerabilities in application code and database queries. Use when you need to scan code for SQL injection risks, review query construction, validate input sanitization, or implement secure query patterns. Trigger with phrases like "detect SQL injection", "scan for SQLi vulnerabilities", "review database queries", or "check SQL security".

tools-only 2f76756 3 files · 5.4 KB Updated Sep 9, 2026 7 repo stars

File contents

Detecting Sql Injection Vulnerabilities

Overview

This skill provides automated assistance for the described functionality.

Prerequisites

Before using this skill, ensure:

Application source code accessible in {baseDir}/
Database query files and ORM configurations available
Framework information (Django, Rails, Express, Spring, etc.)
Write permissions for security reports in {baseDir}/security-reports/

Instructions

Identify input surfaces and data flows into database queries.
Review query construction and parameterization patterns.
Flag injection vectors and document impact.
Recommend fixes (parameterized queries, ORM patterns, validation) and tests.

See {baseDir}/references/implementation.md for detailed implementation guide.

Output

The skill produces:

Primary Output: SQL injection vulnerability report saved to {baseDir}/security-reports/sqli-scan-YYYYMMDD.md

Report Structure:

# SQL Injection Vulnerability Report
Scan Date: 2024-01-15
Application: E-commerce Platform
Framework: Django 4.2

## Error Handling

See `{baseDir}/references/errors.md` for comprehensive error handling.

## Examples

See `{baseDir}/references/examples.md` for detailed examples.

## Resources

- SQL Injection Prevention Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html
- OWASP Top 10 - Injection: https://owasp.org/www-project-top-ten/
- CWE-89: SQL Injection: https://cwe.mitre.org/data/definitions/89.html
- CAPEC-66: SQL Injection: https://capec.mitre.org/data/definitions/66.html
- Django Security: https://docs.djangoproject.com/en/stable/topics/security/

---name: detecting-sql-injection-vulnerabilities-2description: Detect and analyze SQL injection vulnerabilities in application code and database queries. Use when you need to scan code for SQL injection risks, review query construction, validate input sanitization, or implement secure query patterns. Trigger with phrases like "detect SQL injection", "scan for SQLi vulnerabilities", "review database queries", or "check SQL security".license: MIT--- # Detecting Sql Injection Vulnerabilities ## Overview This skill provides automated assistance for the described functionality. ## Prerequisites Before using this skill, ensure: - Application source code accessible in {baseDir}/ - Database query files and ORM configurations available - Framework information (Django, Rails, Express, Spring, etc.) - Write permissions for security reports in {baseDir}/security-reports/ ## Instructions 1. Identify input surfaces and data flows into database queries. 2. Review query construction and parameterization patterns. 3. Flag injection vectors and document impact. 4. Recommend fixes (parameterized queries, ORM patterns, validation) and tests. See `{baseDir}/references/implementation.md` for detailed implementation guide. ## Output The skill produces: **Primary Output**: SQL injection vulnerability report saved to {baseDir}/security-reports/sqli-scan-YYYYMMDD.md **Report Structure**: ``` # SQL Injection Vulnerability Report Scan Date: 2024-01-15 Application: E-commerce Platform Framework: Django 4.2 ## Error Handling See `{baseDir}/references/errors.md` for comprehensive error handling. ## Examples See `{baseDir}/references/examples.md` for detailed examples. ## Resources - SQL Injection Prevention Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html - OWASP Top 10 - Injection: https://owasp.org/www-project-top-ten/ - CWE-89: SQL Injection: https://cwe.mitre.org/data/definitions/89.html - CAPEC-66: SQL Injection: https://capec.mitre.org/data/definitions/66.html - Django Security: https://docs.djangoproject.com/en/stable/topics/security/

Frequently asked questions