---
title: "SQL Injection - Air Market"
description: "When something a user types ends up inside a database query, they may be able to change what that query does. This walks through where to look and how to confirm it. Use it when testing forms, filter…"
canonical: "https://airmarket.ai/app/sqli-sql-injection"
---

[Air Market](/) / [Security](/category/security) / SQL Injection

Skill by [yaklang.io Project](/@yaklang)

# SQL Injection

Trace user input to the query and see what it can change

## What this does

When something a user types ends up inside a database query, they may be able to change what that query does. This walks through where to look and how to confirm it. Use it when testing forms, filters, logins or reports on a database-backed app.

### Top 3 things it does for you

- Test whether input reaches a SQL query
- Probe login logic for injection
- Check sorting, filtering and reporting parameters

## Information

**SQL Injection at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [yaklang.io Project](/@yaklang) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 47 KB |
| Licence | MIT |
| Repository | [yaklang/hack-skills](https://github.com/yaklang/hack-skills/tree/5bf2fd1eb50d20321b89b04920fd4c663c521bc9/skills/sqli-sql-injection) |
| GitHub stars | 1,859 (as of Nov 2026) |
| Installs | 4,242, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of SQL Injection and flagged nothing. AIR's verdict: **safe**.

**What SQL Injection's check was run against**

|  |  |
| --- | --- |
| Commit | 5bf2fd1eb50d20321b89b04920fd4c663c521bc9 |
| Content hash | 7493ba0e7d9ed21b8bb593d24a8bd5589d072d0b4917abef7d4c9f5aef182d03 |
| Files read | [Browse the files at this exact commit](https://github.com/yaklang/hack-skills/blob/5bf2fd1eb50d20321b89b04920fd4c663c521bc9/skills/sqli-sql-injection/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for SQL Injection](/security/sqli-sql-injection)

## About SQL Injection

A SQL injection playbook. It applies wherever input reaches SQL queries - authentication logic, sorting, filtering, reporting.

It also covers database-specific blind and out-of-band execution paths, for the cases where nothing comes back in the response.

## What's inside

- SKILL.md - instructions
- SCENARIOS.md - reference
- SQLMAP_ADVANCED.md - reference

## Questions

### Is SQL Injection safe to install?

AIR scanned this exact version of SQL Injection and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 5bf2fd1eb50d, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/sqli-sql-injection.

### How do I install SQL Injection?

Open https://airmarket.ai/app/sqli-sql-injection on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/yaklang/hack-skills/tree/5bf2fd1eb50d20321b89b04920fd4c663c521bc9/skills/sqli-sql-injection. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by yaklang.io Project](/@yaklang)

---

Canonical URL: <https://airmarket.ai/app/sqli-sql-injection>