Axguard SQL — Data skill for Claude Code
SQL injection sinks — f-string/format/concat queries, ORM raw helpers.
How to install Axguard SQL
Installs to ~/.claude/skills/awarexone-axguard-axguard-sql/SKILL.md
mkdir -p ~/.claude/skills/awarexone-axguard-axguard-sql && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-sql.md -o ~/.claude/skills/awarexone-axguard-axguard-sql/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Axguard SQL does
description: SQL injection sinks — f-string/format/concat queries, ORM raw helpers. Usage: /axguard-sql [path]
/axguard-sql
**Specialist:** SQL Injection Hunter
Usage
/axguard-sql
/axguard-sql ./backend
Focus
- String-built SQL (
f"...",%s/.format,+concat intoexecute) - ORM
.raw/text(/from_sqlhelpers - PHP
mysqli_query/->querywith$interpolation
Steps
- Scan → keep
sql.*. - Confirm the interpolated value is request- or us
Alternatives in Data
- SQL Queries — Generate SQL queries from natural language across major dialects 7.8k ★
- LLM Redteam — LLM red-team corpus runner — fires categorized prompt-injection / jailbreak / system-prompt-leak / data-exfil 4.5k ★
- Vibesec — Helps write secure code by preventing common vulnerabilities including IDOR, XSS, SQL injection, SSRF, and wea 687 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Analyse Queries
Analyse SQL queries and ORM code for performance issues and missing indexes
Claude Sessions Duckdb
Query your Claude Code session transcripts with SQL — one DuckDB script, five views, and the format traps that
Axguard Data
Training-data registry and pipeline (Phase 9 — no model training). Usage: /axguard-data …
Sdd DB Reverse Full
Reverse engineering de TOUS les objets SQL exécutables d'une base (lecture seule) — procédures stockées, fonct
Sdd DB Reverse
Reverse engineering d'UN objet SQL exécutable — procédure stockée, fonction, vue ou trigger (P0.1 2026-07-24)
Token Dashboard
See where Claude Code is burning tokens - turn raw JSONL transcripts into local cost analytics, hotspot views,
Related Agents
Sub Agent Security Reviewer
Security gate for the inner loop (G5). Use ONLY when the change touches auth, external input boundaries, SQL/O
Frappe Reviewer
Senior Frappe Framework and ERPNext code reviewer that audits Python controllers, SQL queries, whitelisted API
Kotlin Debugger
Use this agent for Kotlin debugging - stack traces, Micronaut bean injection, Exposed ORM queries, payment sta