C#中如何使用Dapper的动态参数？避免SQL注入风险？

var sql = "SELECT * FROM Users WHERE Name = @Name AND Age > @Age";
var users = connection.Query(sql, new { Name = "张三", Age = 18 });

var parameters = new DynamicParameters();
parameters.Add("@Email", "user@example.com");
parameters.Add("@Count", dbType: DbType.Int32, direction: ParameterDirection.Output);
<p>connection.Execute("GetUserCountByEmail", parameters, commandType: CommandType.StoredProcedure);</p>
                    <div class="aritcle_card">
                        <a class="aritcle_card_img" href="/ai/%E5%8D%83%E9%9D%A2%E8%A7%86%E9%A2%91%E5%8A%A8%E6%8D%95">
                            <img src="https://img.php.cn/upload/ai_manual/000/000/000/175680315825545.png" alt="千面视频动捕">
                        </a>
                        <div class="aritcle_card_info">
                            <a href="/ai/%E5%8D%83%E9%9D%A2%E8%A7%86%E9%A2%91%E5%8A%A8%E6%8D%95">千面视频动捕</a>
                            <p>千面视频动捕是一个AI视频动捕解决方案，专注于将视频中的人体关节二维信息转化为三维模型动作。</p>
                            <div class="">
                                <img src="/static/images/card_xiazai.png" alt="千面视频动捕">
                                <span>27</span>
                            </div>
                        </div>
                        <a href="/ai/%E5%8D%83%E9%9D%A2%E8%A7%86%E9%A2%91%E5%8A%A8%E6%8D%95" class="aritcle_card_btn">
                            <span>查看详情</span>
                            <img src="/static/images/cardxiayige-3.png" alt="千面视频动捕">
                        </a>
                    </div>
                <p>int count = parameters.Get<int>("@Count");

// 千万别这么写
string sql = $"SELECT * FROM Users WHERE Name = '{userName}'";

string sql = "SELECT * FROM Users WHERE Name = @Name";
var user = connection.Query(sql, new { Name = userName });