exploiting-sql-injection-with-sqlmap
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for legitimate cybersecurity activities such as penetration testing and vulnerability assessment. It emphasizes the necessity of proper authorization and rules of engagement.
- [COMMAND_EXECUTION]: The documentation describes the use of standard security tools like sqlmap and Burp Suite. These are intended components of the skill's primary purpose and do not represent unauthorized command execution.
- [EXTERNAL_DOWNLOADS]: The skill references standard installation procedures for sqlmap using official package managers (pip and apt). These are well-known, trusted sources for this specific software.
- [INDIRECT_PROMPT_INJECTION]: The included Python script processes input text to identify IOCs (IPs, domains, hashes) using regular expressions. The script lacks any high-risk capabilities such as network access, file writing, or dynamic execution, making it resilient to instruction injection via the processed data.
Audit Metadata