SQ

sql-injection-testing

Provides a framework to locate SQL injection vulnerabilities, test payloads, extract data, and create security reports.

Install

mkdir -p .claude/skills/sql-injection-testing && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/5082" && unzip -o skill.zip -d .claude/skills/sql-injection-testing && rm skill.zip

Installs to .claude/skills/sql-injection-testing

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

SQL注入测试的专业技能和方法论
16 charsno explicit “when” trigger
Intermediate

Key capabilities

  • Identify user input points for SQL injection
  • Perform basic SQL injection detection using various techniques
  • Identify database types through SQL queries
  • Extract database names, table names, column names, and data
  • Generate security reports with vulnerability details and remediation advice

How it works

The skill systematically identifies user input points, applies various SQL injection payloads to detect vulnerabilities, and then extracts database information. It also includes techniques to bypass WAFs.

Inputs & outputs

You give it
Web application URL or HTTP request data
You get back
Identified SQL injection vulnerabilities and extracted database information

When to use sql-injection-testing

  • Testing web input for SQLi
  • Verifying security vulnerabilities
  • Automating SQLi detection with tools

About sql-injection-testing

Provides a framework for identifying SQL injection points, testing payloads, and extracting database info. It assists in verifying vulnerabilities and generating security reports.

SQL注入测试的专业技能和方法论

When not to use it

  • When testing on production data that cannot be disrupted
  • When performing operations like DROP or DELETE without caution

Limitations

  • Testing must be performed only in authorized environments
  • Avoid destructive operations on production data
  • All testing steps must be recorded for reproducibility

How it compares

This skill provides a structured methodology for SQL injection testing, including manual and automated tool usage, unlike ad-hoc testing.

Compared to similar skills

sql-injection-testing side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
sql-injection-testing (this skill)37moReviewIntermediate
data-safety-auditor37moNo flagsAdvanced
supabase-common-errors427dReviewIntermediate
supabase-debug-bundle127dCautionBeginner

Try saying

Example prompts that trigger this skill in your AI assistant.

You might also like

data-safety-auditor

ananddtyagi

Comprehensive data safety auditor for Vue 3 + Pinia + IndexedDB + PouchDB applications. Detects data loss risks, sync issues, race conditions, and browser-specific vulnerabilities with actionable remediation guidance.

38

supabase-common-errors

jeremylongshore

Execute diagnose and fix Supabase common errors and exceptions. Use when encountering Supabase errors, debugging failed requests, or troubleshooting integration issues. Trigger with phrases like "supabase error", "fix supabase", "supabase not working", "debug supabase".

430

supabase-debug-bundle

jeremylongshore

Execute collect Supabase debug evidence for support tickets and troubleshooting. Use when encountering persistent issues, preparing support tickets, or collecting diagnostic information for Supabase problems. Trigger with phrases like "supabase debug", "supabase support bundle", "collect supabase logs", "supabase diagnostic".

10

solidity-security

wshobson

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

15115

supabase-rls-policy-generator

hopeoverture

This skill should be used when the user requests to generate, create, or add Row-Level Security (RLS) policies for Supabase databases in multi-tenant or role-based applications. It generates comprehensive RLS policies using auth.uid(), auth.jwt() claims, and role-based access patterns. Trigger terms include RLS, row level security, supabase security, generate policies, auth policies, multi-tenant security, role-based access, database security policies, supabase permissions, tenant isolation.

11109

backend-security-coder

sickn33

Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.

2446

Search skills

Search the agent skills registry