SQL Injection Testing

Fail

Audited by Snyk on Jul 28, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs extraction and reporting of database contents (usernames, passwords, database dumps) and contains payloads like "UNION SELECT username,password..." and examples showing displayed credentials, which requires the agent to output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The document contains explicit, ready-to-use exploitation payloads for extracting credentials, exfiltrating data to attacker-controlled hosts, and bypassing authentication — enabling deliberate data theft and unauthorized access.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 28, 2026, 05:47 AM
Issues
2
Security Audit — snyk — SQL Injection Testing