skills.rest
abhijeetkakade1234
abhijeetkakade1234COMMUNITY
Explore all skills by this author →
𝕏@AbhijeetKakade0GitHub

sql-injection-deep-dive

Detect SQL and NoSQL injection vulnerabilities from unsafe query construction patterns.

1|1|Updated Mar 5, 2026
Search Tags:#sql injection#vulnerability assessment#security audit#code security#parameterized queries#nosql injection
One-click install
npx skills add https://github.com/abhijeetkakade1234/skills --skill sql-injection-deep-dive
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sql-injection-deep-dive
Source: https://github.com/abhijeetkakade1234/skills/tree/main/security-audit-orchestrator/specialized/sql-injection-deep-dive
Command: npx skills add https://github.com/abhijeetkakade1234/skills --skill sql-injection-deep-dive

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies and remediates critical SQL and NoSQL injection vulnerabilities caused by unsafe query construction, such as string concatenation and interpolation.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for dangerous patterns like f-strings, template literals, and raw ORM queries that expose databases to unauthorized access.
  • Remediation Guidance: Provides industry-standard fixes using parameterized queries, allowlisting for identifiers, and type coercion for NoSQL.
  • Use Case: Use this during a security review to audit a codebase for potential authentication bypasses or data exfiltration vectors in database-interacting modules.

Quick Start

Use the sql-injection-deep-dive skill to audit the file api/users.py for potential SQL injection vulnerabilities and provide remediation steps.

Frequently Asked Questions about sql-injection-deep-dive

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for SQL injection vulnerabilities?▼

To audit for SQL injection, scan code to detect unsafe query construction patterns like string interpolation and raw ORM queries, then apply remediation through parameterized queries to prevent unauthorized database access.

What is the best way to secure raw ORM queries against injection attacks?▼

Secure raw ORM queries by replacing unsafe string concatenation with parameterized queries, applying identifier allowlisting, and enforcing type-safe input handling to mitigate injection vulnerabilities.

Does parameterized queries support NoSQL injection prevention?▼

Parameterized queries prevent SQL injection, while NoSQL injection prevention requires type coercion and type-safe input handling to secure database interactions against unauthorized access.

Can I use this security audit for PostgreSQL and MySQL environments?▼

Yes, the security audit supports diverse environments including PostgreSQL and MySQL by identifying dangerous query construction patterns and enforcing secure coding practices across these database architectures.

Why does using f-strings and template literals cause SQL injection?▼

F-strings and template literals cause SQL injection by directly interpolating user input into query strings, bypassing safe parameterization and exposing databases to unauthorized access and data exfiltration.

Related Skills

Explore More Software Engineering Skills→
pruizpruiz
39

sql-injection

Detect unsafe SQL query construction from source code patterns.

Community
Advanced
lucasloutayflucasloutayf

security-and-hardening

Identify and mitigate security vulnerabilities in web services and APIs.

Community
Advanced
ToanPV90ToanPV90

sast-scanning

Detects source code vulnerabilities via static analysis with JSON/SARIF outputs.

Community
Advanced
roderikroderik
2

codeql

Identify security vulnerabilities in source code using CodeQL static analysis.

Community
Advanced