Scan TypeScript, Rust, and Go code for risky inline SQL construction.
npx skills add https://github.com/mizchi/skills --skill sql-security-mizchi
Please help me install this Agent Skill. Skill: sql-security Source: https://github.com/mizchi/skills/tree/main/sql/security Command: npx skills add https://github.com/mizchi/skills --skill sql-security-mizchi
SQL-inspired vulnerabilities emerge when host-language code builds SQL strings without proper binding or safe placeholders. This skill provides a focused line-based scanner to detect risky patterns that commonly lead to SQL injection and secret leakage, enabling teams to triage and fix issues before they reach production.
Run the scanner against your project source to surface SQL-injection candidates for manual review.
High-intent search queries and answers about installing and using this skill.
Scanning TypeScript code for SQL injection risks involves analyzing template literals and string concatenations that embed SQL fragments. This skill performs line-based scanning across TypeScript, Rust, and Go projects to surface risky inline SQL construction for manual review.
Detecting unsafe SQL string concatenation requires a focused scanner that identifies inline SQL without proper binding. This skill scans host-code for risky string patterns and provides opt-out markers to silence known-safe lines without suppressing real findings.
Yes, this SQL injection scanner supports Rust and Go source code alongside TypeScript. It applies line-based analysis to detect risky SQL construction patterns across these languages, targeting hand-written source while ignoring generated code and build artifacts.
No external dependencies are required to run this SQL security scan. The scanner operates using only built-in modules and requires a Node 20+ runtime, keeping the toolchain lightweight and avoiding additional package installations.
Suppressing false positives during SQL injection scanning is handled through an opt-out marker. Adding the marker "sql-security: ok" to specific lines or blocks silences known-safe code without suppressing actual vulnerability findings elsewhere in the file.
Line-based scanning for SQL injection detection focuses strictly on hand-written source code and ignores generated code or build artifacts by design. It surfaces potential vulnerabilities for manual review rather than providing automated fixing or runtime query analysis.
2670044605Scan source files for code smells, bugs, security risks, and performance problems.
aist-ai-sastAudit changed files for security risks and produce remediation findings.
kfolkesScan Python source code for security vulnerabilities using the Bandit linter.
SayBGMSearch, scan, and refactor code using ASTs across 40+ languages.
