Audits data-access code for SQL injection vulnerabilities and converts unsafe string-concatenated queries to parameterized statements or ORM equivalents. Triggers on "check for SQL injection", "SQLi audit", "parameterize my queries", "is this query safe", "review my database layer", "convert to prepared statements".
