domains / families / security / sast-sqli

sast-sqli

authentic

Detect SQL injection vulnerabilities in a codebase using a three-phase approach: recon (find unsafe SQL construction sites), batched verify (trace user input to those sites in parallel subagents, 3 sites each), and merge (consolidate batch results). Covers string concat, f-strings, unsafe ORM methods, and dynamic identifiers. Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/sqli-results.md. Use when asked to find SQLi or database injection bugs.

When to use

• find SQLi or database injection bugs
• detect SQL injection vulnerabilities
• find unsafe SQL construction sites
• trace user input to SQL sites
• consolidate batch results

When not to use

• IDOR
• Mass assignment
• XSS via database
• NoSQL injection
• Safe ORM queries

Skill page

Source