mysql-pentesting

SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated pentesting purpose, but that purpose is inherently offensive: it equips the agent to steal credentials, exfiltrate files, exploit vulnerabilities, gain code execution, and establish persistence. There is no clear deceptive installer or hidden exfil endpoint, so this is not confirmed malware, but it is a high-risk offensive security skill unsuitable for general agent use.

The provided fragment is explicit offensive exploitation guidance for MySQL/MariaDB and JDBC clients, demonstrating multiple high-impact compromise paths: arbitrary file read/write, UDF-based native code execution leading to OS command execution (including reverse shells), persistence via webshell/cron/SSH key writes, and potential JDBC RCE/local file exfiltration via attacker-controlled connection parameters and rogue-server flows. There is no indication of legitimate functionality; it should be treated as malicious weaponization material rather than safe dependency code.