PlugWiki

sql-code-review Skill (github): SQL Review for Claude

Makes Claude review SQL for injection risks, slow queries, bad style and weak schema design, then score it.

Installs
15.2K
on skills.sh
Stars
40.7K
on GitHub
Updated
Oct 2026
last repo commit

sql-code-review makes Claude review a selection, or the whole project if nothing is selected, for security, performance, maintainability and database best practices. The checks run in order: SQL injection and access control, query structure and indexes, style and naming, then engine-specific tips.

It ends with a report template. Each issue gets a before and after example, and the review closes with four scores out of 10 and the top three actions. The skill is a single SKILL.md from github/awesome-copilot and bundles no scripts.

Good for

  • Developers who want a second look at SQL before merging
  • Teams working across MySQL, PostgreSQL, SQL Server and Oracle
  • Reviewers who want a fixed report format

Install sql-code-review

Claude Code

  1. 1

    Copy this prompt.

    Install the sql-code-review skill in Claude Code. Run this command:

npx skills add https://github.com/github/awesome-copilot --skill sql-code-review

Then check that it loaded and tell me how to use it.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

From its listing on skills.sh. Source.

What's in the skill

When it loads

Universal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). Focuses on SQL injection prevention, access control, code standards, and anti-pattern detection. Complements SQL optimization prompt for complete development coverage.

Sections in SKILL.md

  1. 🔒 Security Analysis
  2. SQL Injection Prevention
  3. Access Control & Permissions
  4. Data Protection
  5. ⚡ Performance Optimization
  6. Query Structure Analysis
  7. Index Strategy Review
  8. Join Optimization
  9. Aggregate and Window Functions
  10. 🛠️ Code Quality & Maintainability
  11. SQL Style & Formatting
  12. Naming Conventions
  13. Schema Design Review
  14. 🗄️ Database-Specific Best Practices
  15. PostgreSQL
  16. MySQL

Key facts

Author
github (repo owner)
Repo
github/awesome-copilot
Installs on skills.sh
15,150
Repo stars
40,666
License
MIT
Last repo commit
2026-10-30
Files in the skill folder
1 file including SKILL.md

What it includes

  • SQL injection, access control and data protection

    Marks string-built queries as critical, asks for parameterized ones, and checks least privilege, SELECT * on sensitive tables, audit logging and encryption.

    Security Analysis

  • Query structure, indexes, joins and aggregates

    Looks for missing or redundant indexes, cartesian products, functions on indexed columns and inefficient subqueries.

    Performance Optimization

  • Formatting, naming and schema design

    Checks naming consistency, reserved words, normalization, data types, constraints and defaults.

    Code Quality & Maintainability

  • PostgreSQL, MySQL, SQL Server and Oracle tips

    Gives separate guidance per engine, such as JSONB with GIN indexes for PostgreSQL.

    Database-Specific Best Practices

  • Data integrity checks and performance testing

    Suggests checks to run against the data.

    Testing & Validation

  • N+1 queries, overuse of DISTINCT, functions in WHERE

    Each one is shown with a bad and a good version.

    Common Anti-Patterns

  • Four checklists with five checks each

    Security, performance, code quality and schema design.

    SQL Review Checklist

  • Issue, security risk, performance impact, recommendation, before and after

    A fixed format for each finding.

    Issue Template

  • Four scores out of 10 and the top 3 priority actions

    Scores security, performance, maintainability and schema quality.

    Summary Assessment

From the official docs

Questions

What does the sql-code-review skill do?

It makes Claude review SQL for security, performance, maintainability and schema design, and report findings with before and after examples, four scores and three priority actions.

Which databases does it cover?

MySQL, PostgreSQL, SQL Server and Oracle. The description names those four as a universal reviewer, the SKILL.md has a section for each engine, and it asks for database-agnostic recommendations with platform-specific tips.

Does it connect to my database?

Nothing in the SKILL.md says it does. It reviews SQL text you select or that is in your project.

How do I install it?

Use the install box above. The skill is a single SKILL.md inside the github/awesome-copilot repo.

Is it safe to install?

It bundles no scripts, only one SKILL.md. It asks Claude to review and recommend, so check any rewritten SQL before you run it against real data.

What is the companion skill?

The description says it complements a SQL optimization prompt for complete coverage. That prompt is not part of this skill, and this skill does not call it.

Information

updated Nov 2, 2026

Repository
github/awesome-copilot
Folder
skills/sql-code-review

github/awesome-copilotskills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 1
  1. sql-code-review SKILL.md · github.com

Updated Nov 2, 2026.