sniffnet
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill recommends using
setcap cap_net_raw,cap_net_admin=eipon Linux to grant restricted network capture permissions to the Sniffnet binary. This is a security-conscious alternative to running the application with full root privileges. - [EXTERNAL_DOWNLOADS]: The documentation provides links to the official Npcap driver and Npcap SDK for Windows, as well as the MaxMind GeoLite2 database. These are standard and necessary components for the tool's intended network monitoring functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion surface through the analysis of live network traffic in
packet_flow_inspector.py. 1. Ingestion point: Network packet capture via Scapy. 2. Boundary markers: Absent. 3. Capability inventory: The agent has access to file system and command execution tools (e.g.,claude,cursor). 4. Sanitization: Absent. While a surface exists, the risk is inherent to network monitoring and no malicious use of this surface was detected.
Audit Metadata