sql-injection-testing

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). This skill explicitly instructs extracting and reporting sensitive database contents (usernames, passwords, database dumps, proof-of-concept credentials) and shows examples that would require the LLM to output secret values verbatim, creating an exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This document is an explicit, step-by-step SQL injection exploitation guide that provides actionable payloads and techniques (UNION/error/blind/time-based/OOB) to extract credentials and database contents, bypass authentication, and exfiltrate data to attacker-controlled servers — clearly high-risk malicious content.