sql-injection-blind

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly instructs extracting and reporting credentials/tokens (and saving them to evidence files and return summaries), which requires the agent/LLM to output secret values verbatim, creating a high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit exploitation guide for blind SQL injection that details multiple deliberate malicious techniques (data exfiltration, credential theft, OOB callbacks, remote command execution, and post‑exploitation/pivoting), constituting high-risk abuse behavior.