The Agent Skills Directory

SQL Injection Prevention Guidance: The skill offers technical instructions on how to correctly use T-SQL functions like QUOTENAME, sp_executesql, and EXECUTE AS to secure dynamic SQL. This is an educational resource intended to improve database security practices.
Trusted External References: The skill includes links to official Microsoft Learn documentation for QUOTENAME, PARSENAME, and secure dynamic SQL practices. These are verified and trusted sources for technical information.
Secure Command Examples: The provided sqlcmd and T-SQL examples use placeholders (e.g., <server-name>, <database>) for sensitive information and demonstrate how to check for NULL results from QUOTENAME, which is a recommended safety check to prevent silent failures in dynamic SQL batches.

prevent-sql-injection