performing-second-order-sql-injection

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is purpose-built to perform offensive SQL injection exploitation, including credential extraction and OAST-based exfiltration. Its capabilities match its stated purpose, but that purpose is a high-risk exploit workflow for an AI agent; the Burp Collaborator endpoint and database credential theft examples make the security risk high even without evidence of hidden malware.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Sep 14, 2026, 10:27 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-second-order-sql-injection%2F@0ce16cb16e15811602dd92fc958947967db75e4b0b26d818e544aa92e0426a5a