sqlmap
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing the
sqlmapCLI tool. These include high-capability flags such as--os-shellfor obtaining remote shell access and--file-readfor reading files from a target server (e.g., /etc/passwd). These are standard features of the tool and align with the skill's intended purpose for penetration testing. - [INDIRECT_PROMPT_INJECTION]: The skill outlines usage patterns that involve processing external, untrusted content from URLs and captured request files.
- Ingestion points: External target URLs provided via the -u flag and raw HTTP request files provided via the -r flag as documented in SKILL.md.
- Boundary markers: No explicit boundary markers or directives to ignore instructions within the processed data are specified in the instructions.
- Capability inventory: The skill utilizes sqlmap, which has capabilities for file system access and shell command execution on target systems.
- Sanitization: Input validation and content handling are managed by the underlying sqlmap utility rather than the skill instructions.
Audit Metadata