---
title: ToolRouter — Agent Use Case Guide
description: Step-by-step guide for completing a task with a specific AI agent using ToolRouter.
url: https://toolrouter.com/tools/pentest/use-cases/check-sql-injection/openclaw
---
# How to Check SQL Injection with OpenClaw

OpenClaw runs penetration tests as automated, systematic security assessments that cover your entire web application attack surface in one sweep. Scan for injection flaws, authentication weaknesses, misconfigurations, and information disclosure across all your endpoints in a single session. Its automated approach is ideal for establishing regular security scanning cadences and generating consistent vulnerability reports that can be tracked over time.

## Setup

openclaw mcp add toolrouter -- npx -y toolrouter-mcp

## Steps

1. Connect ToolRouter: openclaw mcp add toolrouter -- npx -y toolrouter-mcp
2. Ask OpenClaw: "Test this application for SQL injection"
3. OpenClaw probes inputs with injection payloads
4. Review which endpoints are vulnerable
5. Fix all vulnerable queries and re-test

## Example Prompt

```
Run SQL injection tests against https://staging.myapp.com. Check all user-facing inputs and API parameters.
```

## Tips

- Never use string concatenation to build SQL queries -- always use parameterized statements
- Test both obvious inputs like search fields and hidden inputs like sorting parameters
- SQL injection can exist in headers and cookies too, not just form fields
