wireless-security-wifi-penetration-testing
Fail
Audited by Snyk on Jul 31, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The document contains explicit, step-by-step instructions and scripts to create rogue APs/evil twins, perform deauthentication/DoS, SSL stripping, DNS spoofing, and capture/exfiltrate credentials and handshakes — techniques intended for unauthorized access and credential theft.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs "git clone https://github.com/vanhoefm/dragonslayer.git" at runtime and then executes a script from that repository (./krackattacks-scripts/krack-test-client.py), so remote content is fetched and executed during skill runtime.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill repeatedly instructs the user/agent to run sudo commands, install packages, modify system files under /etc, change kernel modules and network settings, and add iptables/IP forwarding — all of which change the host system state and require elevated privileges.
Issues (3)
E006
CRITICALMalicious code pattern detected in skill scripts.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata