sqlmap-advanced

Warn

Audited by Socket on Sep 23, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

High-risk offensive security skill. It is internally consistent with its stated purpose, but that purpose is to automate exploitation using sqlmap, including database dumping, remote file read/write, and OS shell access. No clear malware, obfuscation, or credential-harvesting behavior is present, and the static backtick finding is a false positive, but the operational capability is dangerous enough to classify as suspicious/high-risk vulnerable content.

Confidence: 92%Severity: 86%
SecurityMEDIUM
references/advanced-usage.md

该内容不是恶意软件包代码,但提供了可用于 SQL 注入后文件读写、操作系统命令执行和 Web Shell 部署的攻击命令。其风险来自明显的利用能力,尤其是上传并执行 PHP Web Shell;仅应在明确授权的测试环境中使用。

Confidence: 99%Severity: 72%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:30 AM
Package URL
pkg:socket/skills-sh/wgpsec%2Faboutsecurity%2Fsqlmap-advanced%2F@62e675c90e30eca001a4b9152a8f80a936932cec89f23399becb72d6126c35bd