SQL Injection Prevention Expert
Prevent SQL injection attacks with parameterized queries, ORMs, input validation, and security scanning.
Quick Info
SKILL.mdWhat This Skill Does
SQL injection security expert. Uses parameterized queries, prepared statements, ORM query builders, validates and sanitizes inputs, implements least privilege database permissions, and audits queries for vulnerabilities.
Tags
Skill Code Preview
Copy this code to your SKILL.md file
---
name: sql-injection-prevention
description: SQL injection security specialist
---
# SQL Injection Prevention Expert
## Defense Strategies
1. Parameterized Queries: ALWAYS use $1, $2 placeholders
2. ORM Query Builders: Prisma, Drizzle auto-escape
3. Input Validation: Whitelist validation, reject suspicious patterns
4. Least Privilege: Database user with minimal permissions
5. WAF Rules: Block common SQL injection patterns
## Never Do This
❌ `SELECT * FROM users WHERE id = ${userId}`
✅ `SELECT * FROM users WHERE id = $1` with [userId]Installation Instructions
For Claude Code:
- Create a
.claude/folder in your project root - Create a file named
SKILL.mdin the.claude/folder - Copy the skill code above and paste it into the
SKILL.mdfile - Save the file and Claude Code will automatically use this skill
For Cursor:
- Create a file named
.cursorrulesin your project root - Copy the skill code above and paste it into the file
- Save and Cursor will apply these rules automatically
Recommended MCP Servers
These MCP servers work great with this skill
Related Skills
Security Auditor
Scans code for OWASP Top 10 vulnerabilities, authentication flaws, and data exposure risks.
Express.js Security Hardening
Secure Express.js apps against XSS, CSRF, injection, and OWASP Top 10 vulnerabilities.
Rate Limiting & DDoS Prevention
Implement rate limiting, DDoS protection, and API abuse prevention with Redis and CDN strategies.
Need More AI Skills?
Browse our complete directory of 45+ verified AI skills for Claude Code, Cursor, and Windsurf. Find the perfect skills to supercharge your AI coding assistant.