sql-injection-anti-pattern

What problem does it solve?

This Skill addresses the critical security vulnerability of SQL Injection, which allows attackers to manipulate database queries through malicious input, potentially leading to data breaches, unauthorized access, or system compromise.

Core Features & Use Cases

• Vulnerability Detection: Identifies insecure code patterns where user input is directly concatenated into SQL queries.
• Secure Code Examples: Provides clear "BAD" (vulnerable) and "GOOD" (secure) code snippets demonstrating how to prevent SQL injection using parameterized queries.
• Prevention Guidance: Offers actionable steps and best practices for developers to secure their database interactions.
• Use Case: When reviewing code that interacts with a database, use this Skill to automatically flag and suggest fixes for any instances of SQL string concatenation, ensuring robust protection against injection attacks.

Quick Start

Review the provided Python code snippet for SQL injection vulnerabilities and suggest secure alternatives.