sqlmap-scan
SQL injection detection and exploitation using SQLMap. Modes: detect (--batch), enumerate (--dbs), dump. Use when asked to test for SQL injection vulnerabilities. REQUIRES explicit authorization.
SQL Injection Testing
This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". It provides comprehensive techniques for identifying, exploiting, and understanding SQL injection attack vectors across different database systems.
sql-injection-prevention
Prevents SQL injection attacks by enforcing parameterized queries and ORM patterns that keep user data separate from SQL commands. Triggers on: SQL query, database query, user input in query, dynamic query, string concatenation in SQL, f-string SQL, format SQL, raw SQL, execute query, %s in SQL, LIKE clause, ORDER BY, search.
django-security
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.
gcp-injection
Use this skill when users need to audit, detect, or remediate Injection vulnerabilities (OWASP A03:2021) on Google Cloud Platform. This includes SQL injection, Cross-Site Scripting (XSS), command injection, LDAP injection, and any scenario where untrusted data is sent to an interpreter. Covers configuring Cloud Armor WAF preconfigured rule sets (sqli-stable, xss-stable, rce-stable, php-stable), reviewing Security Command Center findings for injection-related threats (Container Threat Detection, Web Security Scanner), and auditing Apigee API proxies for JSON/XML threat protection. Activate for GCP WAF hardening, injection prevention, or OWASP A03 compliance.
sql-injection-testing
Use this skill when the user asks to test for SQL injection vulnerabilities, perform SQLi attacks, bypass authentication using SQL injection, extract database information, or otherwise assess database-related security flaws.
performing-security-testing
Test automate security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues. Use when performing security assessments, penetration tests, or vulnerability scans. Trigger with phrases like "scan for vulnerabilities", "test security", or "run penetration test".
SQL Injection Detector
Detect SQL injection detector operations. Auto-activating skill for Security Fundamentals. Triggers on: "sql injection detector", "sql detector", "sql" Part of the Security Fundamentals skill category. Use when working with SQL injection detection functionality. Trigger with phrases like "sql injection detector", "sql detector", "sql".
SQLMap Database Penetration Testing
This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration testing." It provides comprehensive guidance for using SQLMap to detect and exploit SQL injection vulnerabilities.
gin-database
Integrate PostgreSQL databases with Go Gin APIs using GORM or sqlx. Covers repository pattern, connection pooling, transactions, migrations, and dependency injection. Use when adding database support, creating models, writing queries, implementing repositories, setting up migrations, or wiring database layers into a Gin project. Also activate when the user mentions GORM, sqlx, database connection, SQL queries, repository pattern, or database migrations in a Go/Gin context.
django-security
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.
gin-database
Integrate PostgreSQL databases with Go Gin APIs using GORM or sqlx. Covers repository pattern, connection pooling, transactions, migrations, and dependency injection. Use when adding database support, creating models, writing queries, implementing repositories, setting up migrations, or wiring database layers into a Gin project. Also activate when the user mentions GORM, sqlx, database connection, SQL queries, repository pattern, or database migrations in a Go/Gin context.
security-best-practices
Secure programming best practices based on the OWASP Cheat Sheet Series. Use this skill whenever writing, reviewing, or discussing application security, input validation, authentication, authorization, cryptography, session management, error handling, logging, or any code that handles user input, secrets, HTTP headers, file uploads, or API endpoints. Also use when someone asks about preventing common vulnerabilities (XSS, SQL injection, CSRF, SSRF, etc.), securing infrastructure (Docker, Kubernetes, CI/CD), or reviewing dependencies for supply chain risks. This skill should be consulted proactively during code review and security audit tasks, even if the user does not explicitly mention security.
Django Security
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.
SQL Injection Testing
This skill should be used when the user asks to "test for SQL injection vulnerabilities", "perform SQLi attacks", "bypass authentication using SQL injection", "extract database information through injection", "detect SQL injection flaws", or "exploit database query vulnerabilities". It provides comprehensive techniques for identifying, exploiting, and understanding SQL injection attack vectors across different database systems.
SQLMap Database Penetration Testing
This skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns from a vulnerable database," or "perform automated database penetration testing." It provides comprehensive guidance for using sqlmap to detect and exploit SQL injection vulnerabilities.
sqlmap-database-pentesting
This Skill should be used when the user asks to "automate SQL injection testing," "enumerate database structure," "extract database credentials using sqlmap," "dump tables and columns..."
django-security
Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.