SECURITY2 Multi-file Components

SQL Injection Prevention & Parameterized Query Shield

Ensures all database drivers and ORMs use prepared statements and parameterized inputs.

Author: TRIHEX Architecture Lab

•

License: MIT

•

Version: 2.1.0

Inert Code Verified · Heuristic Static Security ScannerHeuristic Scanner: LOW Risk

Heuristic static security scanner audited 2 files (2520 bytes). External code. Review before execution.

v2.1.0

Skill Files (2)

Compatible Runtimes

AntigravityClaude CodeCursor

SKILL.md·markdown

# SQL Injection Prevention & Parameterized Query Shield

Code review guidelines for eliminating string-concatenated SQL queries across Postgres, MySQL, and SQLite.

## Core Invariants & Rules
1. Never concatenate strings into query templates. Use tagged template literals sql``.
2. Verify input validation and security boundaries on all executions.
3. Keep configurations modular, typed, and auditable.

## Operational Workflow
1. Analyze requirements against existing codebase patterns.
2. Apply standardized implementation templates.
3. Execute verification suites before deployment.