Sql Query Reviewer
Audit SQL and ORM queries for security vulnerabilities, N+1 performance issues, and indexing anti-patterns.
Free
Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
GitHub Copilot
Gemini CLI+20 moreClaude CodeCursorCodex CLIGitHub CopilotGemini CLI
OpenClaw
Manus
Grok+17 agentssql-query-reviewer
Example session with this skill installed
Audit user_service.py and post_controller.js for security flaws and performance issues. Can you check the Raw SQL and Prisma queries?
- Read your context and instructions
- Compiled the sql-query-reviewer
CRITICAL: SQL Injection vulnerability in user_service.py:12. Query uses string formatting.
Fix: Use query parameters: cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
HIGH: N+1 detected in post_controller.js.
Fix: Add include: { authors: true } to your Prisma query.
Connects securely to your tools. The creator never sees your data.
About this skill
What it does
The SQL Query Reviewer is a specialized auditing tool designed to inspect data-access code for security vulnerabilities, performance bottlenecks, and logic errors. It scans raw SQL files, migration scripts, and ORM code (Django, SQLAlchemy, Prisma, ActiveRecord, etc.) to ensure your database interactions are safe and efficient.
Why use this skill
Reviewing SQL requires deep domain expertise. This skill automates the detection of critical issues like SQL injection and N+1 query patterns that are often missed in standard code reviews. It provides developer-centric feedback, suggesting specific remediations—such as replacing OFFSET with keyset pagination or identifying missing indexes—saving hours of manual troubleshooting and preventing production outages.
Key Features
- Security Audit: Detects critical SQL injection patterns in string interpolations and dynamic queries.
- Performance Profiling: Flags N+1 issues in ORM loops and identifies full table scans in large datasets.
- Explain Plan Analysis: Guidance on interpreting
EXPLAIN ANALYZEoutput across PostgreSQL, MySQL, and SQL Server. - ORM Support: Specialized checks for popular frameworks and query builders.
- Correctness Checks: Validates NULL handling, transaction atomicity, and deterministic pagination.
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Free forever
No account required to browse
Trust & safety
Security scanned
Verified clean 3 months ago
- Free to download with an account