wireless-security-wifi-pentest

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document provides explicit, actionable instructions for credential theft, MITM interception, rogue AP/evil-twin deployment, deauthentication/DoS, and offline/online cracking techniques that enable unauthorized access and data exfiltration if used outside authorized testing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes commands that git-clone and then execute remote repositories at runtime (git clone https://github.com/s0lst1c3/eaphammer.git followed by ./eaphammer and git clone https://github.com/vanhoefm/dragonslayer.git followed by ./dragonslayer.py), which fetches and runs external code that controls the agent workflow.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). This skill repeatedly instructs the agent to run privileged commands (sudo apt install, sysctl, iptables, airmon-ng check kill, ip addr add, hostapd/dnsmasq, etc.), modify network/system configuration and create service/config files — all actions that change the host machine state and require elevated privileges.