sast-sqli

BENIGN for internal coherence but high-risk as a security capability. The skill’s behavior matches its stated SQLi-audit purpose, uses only local files, and shows no suspicious installs, credential harvesting, or third-party data routing; however, it materially enables offensive security testing, so overall security risk is elevated despite low evidence of malicious intent.