sqli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill's examples and PoC templates instruct embedding session cookies, POST bodies (user/pass), and cookie/header values directly into curl/sqlmap commands and the report (e.g., Cookie: session=USER_SESSION, --cookie="session=X"), which would require the LLM to include real secret/session values verbatim in generated requests or reports, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is a clear offensive exploitation guide: it contains step-by-step SQL injection weaponization (payloads, sqlmap/ghauri usage), WAF-bypass techniques, OOB exfiltration, auth-bypass payloads, database/table dumping and instructions for obtaining an OS shell—all indicating deliberate malicious/abusive intent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs at runtime to fetch and execute remote code via "git clone https://github.com/codingo/NoSQLMap" followed by "python NoSQLMap.py", meaning the URL is used to retrieve and run external code (https://github.com/codingo/NoSQLMap).