sqlmap

SUSPICIOUS/HIGH-RISK: the skill is internally coherent for sqlmap, but its purpose is offensive security and post-exploitation. There is no strong sign of hidden malware or third-party credential interception, yet it grants an AI agent powerful exploit, extraction, file-read, and shell capabilities against external targets, so it is high security risk by design.