sql-injection-testing
Warn
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill documentation includes payloads for Out-of-Band (OOB) data extraction that target external, non-whitelisted domains.
- Evidence includes payloads referencing
attacker-server.comandattacker.comfor exfiltrating database information via DNS and HTTP protocols. - [COMMAND_EXECUTION]: The skill provides highly specific SQL injection payloads intended to bypass authentication mechanisms and manipulate backend database logic.
- It details methods for extracting sensitive information such as database schemas, table structures, and user credentials through various exploitation techniques.
Audit Metadata