SQL Injection Scanner

SQL injection has been around for decades and it's still in the OWASP Top 10. This tool scans your backend code for unsafe query construction, string concatenation in SQL, and missing parameterized queries. It finds the vulnerabilities and shows you how to fix them.

One command. Zero config. Just works.

Quick Start

npx ai-sql-check src/

What It Does

• Scans your codebase for SQL injection vulnerability patterns
• Detects string concatenation in SQL queries
• Finds missing parameterized query usage
• Identifies unsafe ORM patterns and raw query calls
• Generates fix suggestions showing proper parameterized versions