sqlmap

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive SQL injection and data-extraction capabilities, including WAF evasion and password-hash extraction. Install sources appear legitimate and the load-time shell checks are benign, so this is not confirmed malware; however, the exploitation scope and autonomous attack workflow make it a high-risk skill.