What problem does it solve? Confirming a suspected SQL injection vulnerability requires more than a single anomalous response; this Skill turns a raw hypothesis into evidence-backed findings by comparing paired control requests against SQL-semantic variants and measuring reproducible response differentials. ## Core Features & Use Cases - Baseline Establishment: Measures repeatable baseline response ranges before mutating parameters, so noise is quantified rather than guessed. - Paired Differential Testing: Compares control requests with SQL-semantic variants at low request frequency, requiring every claimed differential to reproduce against a matched control. - Structured Classification: Returns evidence-linked observations with oracle type, confidence, blockers, and attack-graph relation updates conforming to the worker-result-v1 schema. - Use Case: A supervisor agent assigns capability web.sqli.validate for a specific endpoint and parameter; the worker verifies scope anchors, runs differential probes, and returns a classified result that updates the multi-hop attack graph. ## Quick Start Assign this worker the web.sqli.validate capability with a scoped endpoint, parameter, and baseline evidence, then ask it to validate the SQL injection hypothesis and return the classified result.
