sqlmap-database-pentesting

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill content clearly describes, demonstrates, and facilitates intentional offensive actions — automated data exfiltration, credential theft, remote code execution, installation of web shells, mass scanning, and evasion techniques — and therefore presents high malicious intent and abuse capability.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text via user-provided target inputs (e.g., the “Target URL” parameter and optional attacker-supplied Burp request/log/bulk files used with sqlmap -r, -l, and -m), which the runtime then sends/uses for SQLMap probing.