tools-sqlmap

SUSPICIOUS: the skill is internally coherent and not overtly deceptive, but it gives an AI agent offensive security capability to exploit SQLi, evade defenses, reuse authenticated sessions, and potentially reach OS-shell. No clear malicious exfiltration or fake install path is present, so this is high-risk vulnerable behavior rather than confirmed malware.