offensive-sqli

The skill contains no evident credential theft, exfiltration, or malicious payload. Its SQLi verification guidance provides offensive security capabilities, and its recommended external tools and skills create supply-chain uncertainty; classify as elevated risk rather than confirmed malware.