sqlmap

The skill’s purpose is explicitly offensive SQL injection testing, and its examples extend to database extraction, server file modification, and OS command execution against user-specified targets. There is no evident malware, obfuscation, or credential exfiltration path, but the broad exploit capability and lack of explicit per-action authorization make the skill high risk.

The supplied fragment is offensive SQL injection and WAF-bypass documentation rather than malicious package code. It contains no evident embedded malware or autonomous data theft, but it explicitly provides actionable procedures for unauthorized database dumping, credential extraction, arbitrary file access, webshell deployment, and remote command execution. Use should be restricted to authorized testing environments.