Backend Queries

SQL injection prevention relies on parameterized queries—binding user input as parameters rather than concatenating strings. This Skill enforces safe parameterization patterns to protect backend queries against injection vulnerabilities while maintaining code clarity and performance.

Query optimization balances efficient schema design, proper indexing, and avoiding N+1 problems or unnecessary joins. This Skill guides you toward performant SQL and ORM patterns aligned with project standards, reducing bottlenecks in data retrieval and modification.

Consistent query patterns across a codebase reduce maintenance friction and bugs. This Skill enforces adherence to internal backend query conventions—including ORM usage, naming, and structure—so your queries align with team standards during development and review.

Yes. This Skill applies to both writing and reviewing backend data access layers. During code review, it helps verify queries meet security requirements, performance expectations, and project conventions before merge.

Beyond SQL injection, poorly constructed queries can leak sensitive data or enable timing attacks. This Skill enforces secure query construction alongside performance best practices, protecting against database-related threats while maintaining application speed.

This Skill covers both raw SQL and ORM queries, so experience with either—or both—is sufficient. It guides safe parameterization and performance patterns regardless of whether you're writing direct SQL or using an ORM framework.