database-lateral-pivot

Fail

Audited by Socket on Oct 11, 2026

3 alerts found:

MalwareSecurityx2
MalwareHIGH
SKILL.md

MALICIOUS。该技能的 stated purpose 就是数据库横向移动、内网探测、RCE、持久化与绕过 ACL,实际能力与之完全一致,但这一本身对 AI 代理而言是高危攻击能力,不属于普通开发或管理工作流。未见第三方安装器或凭据转发到外部 SaaS,但技能教授利用数据库内置能力进行横向渗透、命令执行和反弹 shell,应按高风险恶意/攻击性技能处理。

Confidence: 97%Severity: 98%
SecurityMEDIUM
references/dblink-lateral.md

The fragment is an explicitly dual-use but strongly offensive database lateral-movement and exploitation guide. It contains actionable examples for credential discovery, internal port probing, remote data access, and operating-system command execution, including a reverse shell. It does not itself execute these actions because it is instructional text, so malware presence in the fragment is unlikely; its use against unauthorized systems poses substantial security risk.

Confidence: 99%Severity: 88%
SecurityMEDIUM
evals/evals.json

No malware behavior is implemented in this fragment because it contains only static evaluation/attack-instruction text. However, the instructions are highly actionable for database-based lateral movement and internal probing (dblink pivoting, linked-server enumeration, remote querying, and scanning-like behavior). This is a significant misuse risk if distributed as part of a toolchain or executed by an automation layer elsewhere.

Confidence: 80%Severity: 78%
Audit Metadata
Analyzed At
Oct 11, 2026, 09:53 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fdatabase-lateral-pivot%2F@d5bff85b762bc668bd2a5be929603e9e7a47df5edb26dc4bfe3500a82b23404c