sqli-sql-injection

SUSPICIOUS. This skill is internally coherent as an SQL injection attack playbook, but its purpose is explicitly offensive and high-impact: exploitation, exfiltration, privilege escalation, OS command execution, and transitive loading of more attack material. The static command-substitution findings are mostly benign documentation artifacts, yet the overall skill remains high risk because it equips an AI agent with practical offensive security procedures against real targets.

This fragment is not a legitimate dependency implementation; it is an actionable offensive exploitation cheat sheet for GraphQL/SQL injection with WAF bypass techniques and database-specific primitives enabling high-impact outcomes (OS command execution, file/webshell writes, and external callback/exfiltration). Its presence in a software supply chain would be a critical malicious-content red flag rather than benign documentation.

This fragment is overwhelmingly malicious in intent: it is an offensive exploitation payload collection for multiple database engines, including explicit escalation pathways to command execution and persistence (IBM i command execution; SQLite webshell/cron-style drops; SQLite native code loading). It also includes WAF/filter-evasion techniques and blind extraction templates for data theft. If embedded in a dependency, it would represent a critical supply-chain security concern. Limited context is provided, so certainty about actual execution within a package cannot be fully established, but the indicators of malicious capability are very strong.