Detect non-parameterized SQL and rewrite queries with bound parameters.
npx skills add https://github.com/KILWA73/MiniSoc --skill sql-injection-guard
Please help me install this Agent Skill. Skill: sql-injection-guard Source: https://github.com/KILWA73/MiniSoc/tree/main/.agents/skills/sql-injection-guard Command: npx skills add https://github.com/KILWA73/MiniSoc --skill sql-injection-guard
Auditing database interactions for parameterized queries and ORM-native protection. Trigger when the user asks to "check this query", "audit database code", or "is this SQL safe?".
Run an audit on the provided query or code snippet and output a secure, parameterized rewrite with a brief vulnerability explanation.
High-intent search queries and answers about installing and using this skill.
To audit SQL queries for injection vulnerabilities, the process detects non-parameterized queries and unsafe string concatenation in raw SQL and ORM usage. It then outputs secure, parameterized rewrites with bound parameters and brief vulnerability explanations.
The best way to check if a raw SQL query is safe from injection is to enforce parameterization using bound placeholders like ? or $1. This approach replaces unsafe string concatenation and ensures the database driver securely handles inputs.
Yes, this SQL injection audit works with ORM frameworks like Laravel and Django by validating ORM usage. It specifically checks for unsafe ORM constructs and raw query methods to ensure native protection is maintained across PHP, Node.js, and Python projects.
To rewrite unsafe SQL string concatenation into parameterized queries, replace concatenated variables with bound parameter placeholders like ? or $1. This secures the query by letting the database driver handle input sanitization and outputs the corrected code.
You need to audit ORM usage for SQL injection risks when raw queries or unsafe ORM constructs are introduced into web and backend services. Even with ORMs, raw query methods can bypass native protection and create injection vulnerabilities if not parameterized.
ersinkocTrace SQL injection vulnerabilities from sources to sinks across multiple languages.
EIS-ITSGenerate secure, optimized database queries with parameterized statements, eager loading, indexing, and transactions.
PrirogativusIdentify and mitigate security vulnerabilities in codebases via static analysis.
amano--Intercept HTTP traffic and test web applications for security vulnerabilities.
