sql-query-reviewer
by Zicheng Liao
Audit SQL and ORM queries for security vulnerabilities, N+1 performance issues, and indexing anti-patterns.
- Detect SQL injection vulnerabilities in dynamic queries and raw SQL.
- Identify and fix N+1 query problems in ORM-based applications.
- Optimize slow queries by analyzing index usage and EXPLAIN plans.
Secure checkout via Stripe
Included in download
- Detect SQL injection vulnerabilities in dynamic queries and raw SQL.
- Identify and fix N+1 query problems in ORM-based applications.
- terminal automation included
- Includes example output and usage patterns
See it in action
A real example of what this skill takes in and produces.
Sample output
CRITICAL: SQL Injection vulnerability in user_service.py:12. Query uses string formatting. Fix: Use query parameters: cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
HIGH: N+1 detected in post_controller.js.
Fix: Add include: { authors: true } to your Prisma query.
sql-query-reviewer
by Zicheng Liao
Audit SQL and ORM queries for security vulnerabilities, N+1 performance issues, and indexing anti-patterns.
Secure checkout via Stripe
Included in download
- Detect SQL injection vulnerabilities in dynamic queries and raw SQL.
- Identify and fix N+1 query problems in ORM-based applications.
- terminal automation included
- Includes example output and usage patterns
- Instant install
See it in action
A real example of what this skill takes in and produces.
Sample output
CRITICAL: SQL Injection vulnerability in user_service.py:12. Query uses string formatting. Fix: Use query parameters: cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
HIGH: N+1 detected in post_controller.js.
Fix: Add include: { authors: true } to your Prisma query.
About This Skill
What it does
The SQL Query Reviewer is a specialized auditing tool designed to inspect data-access code for security vulnerabilities, performance bottlenecks, and logic errors. It scans raw SQL files, migration scripts, and ORM code (Django, SQLAlchemy, Prisma, ActiveRecord, etc.) to ensure your database interactions are safe and efficient.
Why use this skill
Reviewing SQL requires deep domain expertise. This skill automates the detection of critical issues like SQL injection and N+1 query patterns that are often missed in standard code reviews. It provides developer-centric feedback, suggesting specific remediations—such as replacing OFFSET with keyset pagination or identifying missing indexes—saving hours of manual troubleshooting and preventing production outages.
Key Features
- Security Audit: Detects critical SQL injection patterns in string interpolations and dynamic queries.
- Performance Profiling: Flags N+1 issues in ORM loops and identifies full table scans in large datasets.
- Explain Plan Analysis: Guidance on interpreting
EXPLAIN ANALYZEoutput across PostgreSQL, MySQL, and SQL Server. - ORM Support: Specialized checks for popular frameworks and query builders.
- Correctness Checks: Validates NULL handling, transaction atomicity, and deterministic pagination.
Use Cases
- Detect SQL injection vulnerabilities in dynamic queries and raw SQL.
- Identify and fix N+1 query problems in ORM-based applications.
- Optimize slow queries by analyzing index usage and EXPLAIN plans.
- Review database migration scripts for correctness and atomicity.
How to Install
mkdir -p ~/.claude/skills && curl -sL https://www.agensi.io/api/install/sql-query-reviewer | tar xz -C ~/.claude/skills/Free skills install directly. Paid skills require purchase - use the download button above after buying.
Reviews
No reviews yet - be the first to share your experience.
Only users who have downloaded or purchased this skill can leave a review.
Early access skill
Be the first to review this skill.
Only users who have downloaded or purchased this skill can leave a review.
Security Scanned
Passed automated security review
Permissions
File Scopes
Creator
Frequently Asked Questions
Learn More About AI Agent Skills
More Premium Skills
software-architect
A structured framework for planning, reviewing, and evolving complex software systems with explicit trade-offs.
designing-hybrid-context-layers
Architects the right retrieval strategy for every query — teaching your agent when to use RAG, a knowledge graph, or a temporal index instead of defaulting to vector search for everything.
consumer-motivation-analyzer
Go beyond surface-level feedback to uncover the psychological drivers and hidden motivations behind buyer behavior.
keyword-research
Transform URLs or product lists into SEO keyword research packs with Google Ads data and intent-based clustering.