interpolated-database-query

by cisco-ai-defense2.6k

Security

Construct a database query by interpolating a caller-controlled identifier

Install

The skill file stays in the publisher's repository.

Paste the copied command in a terminal. It installs this SKILL.md into that agent.

npx skills add cisco-ai-defense/skill-scanner --skill database-query -a cursor -y

How do I install interpolated-database-query?: Download evals/skills/sql-injection/database-query/SKILL.md from the publisher, or copy the path and open the repository. PlugMCP lists the skill and does not host the file.
Where does interpolated-database-query live?: The publisher keeps it at https://github.com/cisco-ai-defense/skill-scanner.
Which agents can use interpolated-database-query?: Claude, Cursor, and Codex can read a SKILL.md you add from the publisher's repository.

The inert helper query.py preserves the historical unsafe string construction. Static analysis only; no database is contacted.