As per my knowledge the current implementation of SSL/TLS does not have the capability to identify the data is malicious or not during the transmission or before encrypt the data. If its have , kindly do let me know.
SSL/TLS is just for transport of the data and has no idea of what the data are for. Therefore it can and will not detect "malicious things", whatever these are. But it can detect somebody trying to sniff or manipulate the traffic in between sender and recipient.
If its not having the trend of identifying of it, then what's wrong on going it that to implement in such a way to get the same time as current SSL/TLS working now ?
Proper detection of "malicious things" can only be achieved if the attacker sets the security flag as defined per RFC 3514. But please note that this is only defined for IPv4 for now. Please also note the date this RFC was issued.