Fix frontmatter descriptions, duplicate YAML blocks, title headings across 60 files

skills/detecting-sql-injection-via-waf-logs/SKILL.md

@@ -17,6 +17,21 @@ license: Apache-2.0
 
 # Detecting SQL Injection via WAF Logs
 
+
+## When to Use
+
+- When investigating security incidents that require detecting sql injection via waf logs
+- When building detection rules or threat hunting queries for this domain
+- When SOC analysts need structured procedures for this analysis type
+- When validating security monitoring coverage for related attack techniques
+
+## Prerequisites
+
+- Familiarity with security operations concepts and tools
+- Access to a test or lab environment for safe execution
+- Python 3.8+ with required dependencies installed
+- Appropriate authorization for any testing activities
+
 ## Instructions
 
 1. Install dependencies: `pip install requests`