sqli-sql-injection

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.85). The skill contains explicit examples that embed plaintext credentials and exfiltrate password values (e.g., connection strings with UID/ PWD, SQL that concatenates or returns password fields, and DNS/HTTP OOB payloads that send password data), which requires generating or handling secret values verbatim and therefore poses a high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content is an explicit offensive SQL injection playbook with step-by-step, actionable instructions for data exfiltration, credential harvesting, remote code execution, webshell/cron installation, and use of tooling to obtain OS shells—clearly facilitating malicious abuse.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs writing files (INTO OUTFILE), executing OS commands (xp_cmdshell, sp_OAMethod), creating UDFs/Java stored procedures, and performing out‑of‑band exfiltration — all actions that can modify system files, escalate privileges, or otherwise change the host state.