Sql Code Review

The sql-code-review skill performs comprehensive security, performance, and maintainability analysis on SQL code across multiple database systems (MySQL, PostgreSQL, SQL Server, Oracle). It targets developers and database administrators who need to identify SQL injection vulnerabilities, access control issues, performance bottlenecks, and code quality problems in their database queries. The skill solves the problem of conducting thorough code reviews manually by providing automated detection of security risks, anti-patterns, and best practice violations in a single analysis.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.: 11
skills.sh installs: 15.6K
GitHub stars: 41K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add github/awesome-copilot --skill sql-code-review --agent claude-code

Installs into .claude/skills of the current project.

Files

SQL Code Review

Perform a thorough SQL code review of ${selection} (or entire project if no selection) focusing on security, performance, maintainability, and database best practices.

🔒 Security Analysis

SQL Injection Prevention

-- ❌ CRITICAL: SQL Injection vulnerability
query = "SELECT * FROM users WHERE id = " + userInput;
query = f"DELETE FROM orders WHERE user_id = {user_id}";

-- ✅ SECURE: Parameterized queries
-- PostgreSQL/MySQL
PREPARE stmt FROM 'SELECT * FROM users WHERE id = ?';
EXECUTE stmt USING @user_id;

-- SQL Server
EXEC sp_executesql N'SELECT * FROM users WHERE id = @id', N'@id INT', @id = @user_id;