The Agent Skills Directory

[COMMAND_EXECUTION]: The instructions describe how to use automated security tools such as sqlmap, burp, and ghauri for vulnerability assessment and exploitation.
[DATA_EXFILTRATION]: The skill outlines methodologies for extracting information from target databases, including specialized payloads for out-of-band (OOB) DNS-based exfiltration (e.g., using dns.attacker.tld placeholders).
[PRIVILEGE_ESCALATION]: Technical guidance is provided for escalating access on a target host through database-level features like xp_cmdshell (MSSQL), COPY FROM PROGRAM (Postgres), or LOAD_FILE (MySQL).
[PERSISTENCE]: The skill documents methods for establishing persistence on a target server by writing a PHP webshell via SQL injection (e.g., using INTO OUTFILE).
[SAFE]: Despite containing offensive technical content, the skill is clearly structured as a professional security resource for pentesting and bug bounty activities. It includes a dedicated section on defensive detection (Sigma rules) and does not exhibit malicious behavior against the agent or the user's local environment.

web-sqli