sql-code-review
Comprehensive SQL security, performance, and quality analysis across MySQL
by githubFree
Description
sql-code-review is an agent skill from the github/awesome-copilot collection that reviews SQL code for security, performance, maintainability and database best practice, across MySQL, PostgreSQL, SQL Server and Oracle. It analyzes the selected code, or the whole project when nothing is selected. Its security analysis focuses on SQL injection, showing the vulnerable pattern of building a query by joining user input into the text and the secure alternative of a parameterized query for each database, along with access control problems and the exposure of sensitive data. Performance and maintainability reviews look for the common problems that make queries slow or hard to change. Each finding comes with an example of the problem and of the fix, so a developer can apply the change directly. It is useful for developers writing data access code, and for reviewers checking pull requests that touch SQL. The review reads the code and does not run it against a database, so the performance advice should be checked with the database's own query plan before it is adopted. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 13.6K installs and passing results from three security audits at the time of the scan.…
Highlights
- SQL injection analysis with parameterized alternatives
- Access control and sensitive data exposure checks
- Performance and maintainability review
- Examples for MySQL, PostgreSQL, SQL Server and Oracle
- Installs with the skills CLI
Ratings & Reviews
No ratings yet
Be the first to rate sql-code-review.
People also visit
sql-code-review FAQ
Which databases does it cover?
MySQL, PostgreSQL, SQL Server and Oracle.
What security issues does it look for?
SQL injection, access control problems and exposure of sensitive data, with parameterized query examples.
Does it run the queries?
No. It reviews the code, so check performance advice against the database's query plan.
How do I install it?
Run npx skills add https://github.com/github/awesome-copilot --skill sql-code-review.
What security audits does it have?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Pass.
What are the best sql-code-review alternatives?
Popular alternatives to sql-code-review include golang-database, sql-pro and mysql-patterns. See all sql-code-review alternatives