database-lateral-pivot

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs searching for stored credentials and using them to connect to other databases/services (e.g., "利用数据库中存储的凭据连接其他服务"), which implies the agent must read and embed secret values verbatim into connection strings/commands, creating high exfiltration risk.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This content is explicitly malicious: it documents techniques for unauthorized lateral movement and data exfiltration via database features (PostgreSQL dblink/postgres_fdw, MSSQL Linked Server/OPENROWSET, MySQL FEDERATED), including credential harvesting, SSRF/inner‑network port probing, remote command execution (COPY TO PROGRAM, xp_cmdshell, reverse shell examples), and persistence/backdoor account creation.