sqlmap-database-pentesting

Fail

Audited by Snyk on Jun 21, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The prompt explicitly instructs and exemplifies extracting and reporting plaintext credentials and hashes (e.g., dumping username/password columns and an example request containing "password=test"), so an agent following it would need to handle and output secret values verbatim.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This skill is explicitly a step-by-step offensive guide for discovering and exploiting SQL injection vulnerabilities—containing instructions for data exfiltration (database/table/column dumps, credential harvesting), credential cracking, remote OS shell access, file read/write (including uploading a web shell), WAF evasion, bulk/automated scanning (including Google dorks) and anonymity techniques—clearly enabling deliberate malicious abuse when used outside an authorized testing scope.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 21, 2026, 09:18 AM
Issues
2
Security Audit — snyk — sqlmap-database-pentesting