SQL Injection Testing
Methods and tools for discovering and exploiting SQL injection vulnerabilities
Skill by AnandBinuArjun
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/anandbinuarjun-sql-injection-testing
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: backend, testing
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/sql-injection-testing
What's inside
- Skill name
SQL Injection Testing- Description
- Methods and tools for discovering and exploiting SQL injection vulnerabilities
- License
- MIT
- Instructions
- 26 lines in SKILL.md · view on GitHub
Agent Skills spec issues
- name: only lowercase letters, digits and single hyphens allowed
- name: "SQL Injection Testing" does not match folder "sql-injection-testing"
Files (1)
- SKILL.md
SKILL.md (first lines)
# SQL Injection Testing Skill
Practical guide for identifying and testing for SQL Injection (SQLi) vulnerabilities in web applications.
## Enumeration & Discovery
1. Identify all user input points (forms, parameters, headers, cookies).
2. Test for error-based SQLi with single/double quotes.
3. Test for boolean-based blind SQLi with logic (' and 1=1).
4. Test for time-based blind SQLi with sleep functions.
## Common Tools
- `sqlmap`: Automated exploitation and database takeover.
- `ghauri`: Advanced SQLi detector.
- `burp-suite`: Manual request manipulation.
## Recommended Workflow
1. Initial scan with `nmap` and `httpx`.
2. Spider site to find endpoints.
3. Run `sqlmap -u [URL] --batch --detect-all`.
4. Manually verify high-risk parameters.
## Best Practices
- Always use parameterized queries for remediation.
- Never use concatenation of strings for SQL queries.
- Implement prepared statements with type checking.From AnandBinuArjun/CODEX-CYEBRSTIKE, MIT.
More from AnandBinuArjun/CODEX-CYEBRSTIKE
- 0.225score
cloud-security
AnandBinuArjun
No description from the publisher yet.
SkillDFreshness: D★ 1Claude Code +9 - 0.222score
api-security
AnandBinuArjun
No description from the publisher yet.
SkillDFreshness: D★ 1Claude Code +9 - 0.222score
xss-testing
AnandBinuArjun
No description from the publisher yet.
SkillDFreshness: D★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Mar 20, 2026 (7 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
Cite this page
SQL Injection Testing skill. Agent Mart. https://agentmart.dev/skills/anandbinuarjun-sql-injection-testing (last updated 2026-10-24)