EdgeIQ SQL Injection Scanner

Scans web app parameters for SQL injection vulnerabilities using boolean, time-based, and UNION SELECT techniques with optional JSON reporting.

Security Scan

The skill is broadly what it says (an active SQLi scanner) but the runtime code expects undeclared license env/files and contains an odd hardcoded email-based license fallback — these inconsistencies and the fact it will actively probe remote sites make it worth further review before installing or running.

Purpose & Capability

Name, description, SKILL.md, README, and the included Python scanner code are consistent: the package implements boolean, time-based, and UNION SELECT SQL injection checks and JSON reporting as described.

Instruction Scope

SKILL.md instructs running sql_scanner.py against target URLs (and optionally setting EDGEIQ_EMAIL). The tool performs active HTTP requests to targets (expected for a scanner). SKILL.md warns about legality, which is appropriate. Note: the instructions suggest Discord commands but there is no Discord integration code — that's just an example usage channel.

Install Mechanism

No install spec or remote downloads; code files are included with the skill. No archive downloads or execution of externally fetched code were observed in the provided files.

Credentials

Registry metadata declares no required env vars, but SKILL.md and the code use EDGEIQ_EMAIL and EDGEIQ_LICENSE_KEY and read ~/.edgeiq/license.key and stripe_licenses.json. The code grants full Pro/Bundle access if EDGEIQ_EMAIL is a specific hardcoded address ([e-mail]). Undeclared env vars and a hardcoded email-based licensing fallback are surprising and disproportionate to the scanner's purpose.

Persistence & Privilege

Skill does not request always:true, does not modify other skills, and only reads (not writes) a user license path in the home directory. No evidence of persistent system-wide changes.

What to consider before installing

This package appears to implement an active SQL injection scanner as advertised, but you should be cautious before installing or running it. Key points to consider: - Active scanning risk: The tool will send many crafted HTTP requests to targets. Only run it against systems you own or have explicit written permission to test. Unauthorized scanning is illegal and can trigger intrusion detection. - Undeclared env vars and license backdoor: The skill and code expect EDGEIQ_EMAIL and EDGEIQ_LICENSE_KEY and read ~/.edgeiq/license.key, but the registry says no env vars are required. There's a suspicious hardcoded acceptance of a specific email ([e-mail]) to enable Pro/Bundle features; this is unexpected and should be clarified or removed by the author. - Source provenance: The registry lists source/homepage as unknown. Prefer code from a verifiable repository or vendor. Confirm the upstream GitHub repo and verify integrity before use. - Run in isolation: If you want to test it, run the scanner in an isolated environment (air-gapped VM or a throwaway container) and monitor network activity to ensure it performs only the intended requests. - Code review: If you plan to use it in production, review/modify the licensing logic to remove hardcoded allowances and make license checks explicit. Also consider adding safe defaults (longer delays, rate-limiting) to avoid accidental DoS. If you want, I can list the exact lines that implement the license checks and the hardcoded email so you can review or patch them.

SQL Injection Scanner

Skill Name: sql-injection-scanner
Version: 1.0.0
Category: Security / Vulnerability Assessment
Price: Free (basic) / Pro ($19/mo) / Bundle ($39/mo)
Author: EdgeIQ Labs
OpenClaw Compatible: Yes — Python 3, pure stdlib + urllib, WSL + Linux

---

What It Does

Detects SQL injection vulnerabilities in web application parameters using multiple detection techniques: boolean-based blind injection, time-based blind injection, and UNION SELECT extraction. Designed for security professionals and developers auditing their own applications.

⚠️ Legal Notice: Only scan domains you own or have explicit written authorization to test. Unauthorized scanning is illegal.

---

Features

• Boolean-based blind injection — infer SQL truth from page response differences
• Time-based blind injection — use SLEEP() delays to confirm injection
• UNION SELECT extraction — pull database version, user, and schema via UNION payloads
• Auto-detection — automatically identifies which parameter types are injectable
• Parameter scanner — test multiple parameters in a single run
• JSON export — structured results for reporting and integration

---

Tier Comparison

Feature	Free	Pro ($19/mo)	Bundle ($39/mo)
Single URL + parameter test	✅	✅	✅
Boolean blind detection	✅	✅	✅
Time-based detection	—	✅	✅
UNION SELECT extraction	—	✅	✅
Multiple parameter scan	—	✅ (10 params)	✅ (unlimited)
JSON export	—	✅	✅
Custom payload wordlist	—	—	✅

---

Installation

cp -r /home/guy/.openclaw/workspace/apps/sql-injection-scanner ~/.openclaw/skills/sql-injection-scanner

---

Usage

Basic scan (free tier)

python3 sql_scanner.py --url "https://example.com/product?id=1"

Pro scan (time-based + UNION + multiple params)

EDGEIQ_EMAIL=[e-mail] python3 sql_scanner.py \
  --url "https://example.com/product?id=1&category=2&search=test" \
  --pro

Test specific parameter only

python3 sql_scanner.py --url "https://example.com/search?q=test" --param q

Full bundle scan with JSON export

EDGEIQ_EMAIL=[e-mail] python3 sql_scanner.py \
  --url "https://example.com/api/user?id=1" \
  --bundle --output report.json

As OpenClaw Discord Command

In #edgeiq-support channel:

!sqli https://example.com/product?id=1
!sqli https://example.com/search?q=test --pro
!sqli https://example.com/api?id=1&uid=2 --bundle

---

Parameters

Flag	Type	Default	Description
--url	string	—	Target URL with parameter(s)
--param	string	all	Specific parameter to test
--pro	flag	False	Enable Pro features
--bundle	flag	False	Enable Bundle features
--output	string	—	Write JSON report to file
--delay	float	1.0	Delay between requests (seconds)
--timeout	int	10	Request timeout (seconds)

---

Output Example

=== SQL Injection Scanner ===
Target: https://example.com/product?id=1

  [1mParameter: id — INJECTABLE 🔴[0m
    Method:     Boolean Blind
    Payload:    ' OR 1=1 --
    True resp:  1423 bytes / 200 OK
    False resp: 0 bytes / 302 redirect
    Confidence: HIGH

  [1mParameter: category — SAFE ✅[0m
    Method:     All checks passed
    Response:   1244 bytes / 200 OK

  Database: MySQL 8.0.23 (via UNION)
  User:     app_user@localhost

  Threat Level: CRITICAL — 1 injectable parameter found

---

Pro Upgrade

Boolean blind + time-based + UNION SELECT + multiple parameters:

👉 Upgrade to Pro — $19/mo

---

Support

Open a ticket in #edgeiq-support or email [e-mail]