payloads-sqli
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to established security research repositories and tools on GitHub, such as PayloadsAllTheThings and sqlmap, which are widely recognized in the cybersecurity community.
- [COMMAND_EXECUTION]: The skill documents a vast array of SQL injection payloads (e.g., UNION-based, Error-based, and Blind SQLi) and bypass techniques. These are intended for educational and auditing purposes against external targets and do not execute locally on the host system.
- [INDIRECT_PROMPT_INJECTION]: As a library of payloads designed to query external databases, the skill facilitates a surface where target responses serve as data ingestion points for the agent. The skill provides the capability inventory of payloads but does not define internal boundary markers or sanitization logic, relying on the agent or user to manage external data safely.
Audit Metadata