sqlmap

SUSPICIOUS: The skill’s stated purpose matches its behavior, but its actual capability is to arm an AI agent with a live SQL injection exploitation tool. There is no obvious credential harvesting or malicious redirection, yet the offensive security functionality and potential for real-world impact make it high security risk.