sqlmap-advanced
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the sqlmap command-line utility for automated vulnerability assessment. It provides templates for various injection techniques and data extraction tasks. The commands involve significant interaction with the host system's shell and network.
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to execute scans against external URLs and subsequently read the output logs (/tmp/sqlmap_output.log). This creates a path for potentially malicious content from a remote server to be ingested into the agent's context. \n
- Ingestion points: The sqlmap_output.log file in SKILL.md, which contains data retrieved from external target URLs. \n
- Boundary markers: The instructions lack delimiters or warnings to ignore instructions that might be present in the tool's output. \n
- Capability inventory: The skill provides access to system shell commands, file system read/write operations, and network scanning tools. \n
- Sanitization: There is no evidence of sanitization or filtering of the content read from the logs before it is processed by the agent.
- [DYNAMIC_EXECUTION]: The instructions in references/advanced-usage.md include a step to programmatically create a PHP script (/tmp/shell.php) on the local filesystem using string concatenation. This file is intended for upload to a target server to facilitate remote code execution as part of a security audit.
Audit Metadata