sast-sqli

The skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive security assessment capability focused on SQL injection. There is no clear credential theft, exfiltration, or suspicious install path, so this is not malware; however, it remains high risk because it operationalizes vulnerability discovery and suggested exploit verification.