Hacker News Reader

How would you 'check' it, in the sense it could be on a checklist. Are there tools to automate this type of thing?

Good question. I did a quick Google search and here is a solution. http://sqlmap.sourceforge.net/

You could also let a program like Nessus run on your website. But that goes globally and will detect it.