sast-sqli - Detect SQL injection vulnerabilities in code
Detect SQL injection vulnerabilities through recon, parallel taint verification, and result merging, then write findings to sast/sqli-results.md.
Tags
Updated: 2026-10-19Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Find vulnerable SQL construction sites
- Trace user input flows
- Verify injection paths in batches
- Merge batch findings
Inputs
- Codebase
- sast/architecture.md
Outputs
- sast/sqli-recon.md
- sast/sqli-results.md
Requirements
- Existing sast/architecture.md
- Subagent support
