The Complete Production SOP: How to Deploy and Run sqlmap Automated SQL Injection Testing Engine in Autonomous AI Agents

---
name: "sqlmap-automated-injection-testing"
description: "Detect and verify SQL injection vulnerabilities across HTTP requests with sqlmap."
metadata:
  author: "sqlmapproject"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "run sqlmap scan"
  - "test sql injection sqlmap"
  - "audit request with sqlmap"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

#!/usr/bin/env bash
set -euo pipefail

TARGET_REQ="tests/security/request.txt"
OUTPUT_DIR="tests/security/results"

if [ ! -f "$TARGET_REQ" ]; then
  echo "Error: $TARGET_REQ missing. Capture target request before running audit." >&2
  exit 1
fi

sqlmap -r "$TARGET_REQ" --batch --level=2 --risk=1 --output-dir="$OUTPUT_DIR" --smart

import { Request, Response } from 'express';
import { db } from '../db';

export async function handleSearch(req: Request, res: Response): Promise<void> {
  const { query, page } = req.body;
  const offset = (Number(page) - 1) * 20;

  // Deterministic remediation: enforce parameterized query structure
  const results = await db.query(
    'SELECT id, title, summary FROM items WHERE title ILIKE $1 ORDER BY id DESC LIMIT 20 OFFSET $2',
    [`%${query}%`, offset]
  );

  res.json({ data: results.rows });
}