sqlmap

name	sqlmap
description	Automated SQL injection detection and exploitation. Tests web URLs for SQLi with configurable risk/level. Use in exploit phase for validated targets.
metadata	{"openclaw":{"emoji":"💉","requires":{"bins":["python3"],"env":[]},"primaryEnv":null}}

Sqlmap

SQL injection tool for detecting and exploiting SQL injection flaws.

Usage

Executor invokes with target (URL) and optional params.extra (sqlmap CLI args), params.timeout.

Parameters

Param	Type	Required	Description
target	string	yes	URL to test (e.g. with ?id=1)
extra	list	no	Extra sqlmap CLI arguments
timeout	int	no	Timeout in seconds (default 600)

Docker

Image built from skills/sqlmap/Dockerfile. One-click deploy via skills/deploy.sh or skills/deploy.ps1.