{"uid":"cap_4_YgmPQ07VZVgOeSP3Igm","slug":"defi-shield-hazel-vercel-app-d6b664e0","name":"SQL Injection Detection API","description":"Performs safety assessments of DeFi contracts and transactions, returning security scores and risk indicators for developer use.","url":"https://defi-shield-hazel.vercel.app/api/dev/query-safety","method":"POST","headers":{},"bodySchema":null,"responseSchema":null,"example":{"request":{"query":"SELECT * FROM users WHERE id = 1 AND name = 'admin'"},"response":{"findings":[],"risk_level":"none","analyzed_at":"2026-06-13T04:21:51.265Z","query_length":51,"recommendation":"SAFE — no injection patterns detected. Consider using parameterized queries for defense in depth.","is_parameterized":false,"patterns_checked":18,"response_time_ms":1,"injection_detected":false}},"exampleRequest":{"query":"SELECT * FROM users WHERE id = 1 AND name = 'admin'"},"tags":["x402"],"displayCostAmount":"0.02","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.02/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.02","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_GVyumPQ8TFxLmGg1tYMLS","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.02","costPer":"request","priority":0,"asset":null,"unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Analyzes SQL query strings for injection vulnerabilities including UNION attacks, stacked queries, tautologies, blind injection, error-based, and boolean extraction patterns","exampleAgentPrompt":"Can you check if this SQL query is safe to execute — 'SELECT * FROM orders WHERE user_id = ' + userInput — and tell me whether it contains any injection patterns like UNION attacks or tautologies?","exampleUseCases":null,"resultDescription":"Returns a JSON object with injection_detected boolean, risk_level (e.g. 'none', 'high'), an array of findings describing detected patterns, the number of patterns checked (up to 18), whether the query uses parameterized form, a human-readable recommendation, and response time in milliseconds.","failureModes":["Missing or malformed query field returns validation error","Extremely long query strings may be truncated or rejected","False negatives possible for highly obfuscated or novel injection patterns not in the 18-pattern ruleset","Non-SQL input (e.g. NoSQL, GraphQL) may return misleading results"],"whenToPreferThis":"Use this endpoint when you need fast, real-time SQL injection screening of user-supplied or dynamic query strings before execution — especially when you need structured findings and a risk level rather than just a pass/fail. Prefer this over generic prompt injection detectors when the input is specifically a SQL query.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T12:42:38.413Z","isFirstParty":false}