Enforce parameterized queries and least-privilege credentials to prevent SQL injection.
npx skills add https://github.com/scruffydan/AI-Agents --skill sql-security
Please help me install this Agent Skill. Skill: sql-security Source: https://github.com/scruffydan/AI-Agents/tree/main/source/skills/sql-security Command: npx skills add https://github.com/scruffydan/AI-Agents --skill sql-security
This Skill helps teams prevent SQL injection, minimize database access risks, and enforce safe SQL practices across applications using raw SQL, query builders, or ORMs.
Review the project to identify unparameterized SQL and convert them to prepared statements.
High-intent search queries and answers about installing and using this skill.
Prevent SQL injection by using parameterized queries and prepared statements instead of string concatenation. This ensures user input is treated strictly as data rather than executable code, blocking injection attacks across raw SQL and ORM usage.
Least-privilege access restricts database credentials to only the permissions necessary for specific tasks. Configuring secure authentication and roles this way minimizes potential damage if a credential is compromised during a database operation.
Audit risky SQL queries by implementing logging for database operations and unparameterized SQL. Reviewing these logs helps identify unsafe query construction from user input or stored procedures so they can be converted to prepared statements.
Yes, securing stored procedures and migrations is part of enforcing safe SQL practices. The approach applies parameterized queries, input validation, and least-privilege credentials across code, deployments, and database configurations to minimize access risks.
marquesfelipIdentify and fix SQL injection vulnerabilities in data access layers.
sjinksDetect SQL injection risks in query construction and database execution paths.
bughqConstruct type-safe SQL queries with a fluent API for Stacks applications.
Nir-BhayProvide parameterized queries and input validation to prevent SQL injection vulnerabilities.
