The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill utilizes sudo to execute various radio-focused commands, such as in scripts/rf_recon.sh (e.g., sudo bettercap, sudo hcitool, sudo zbstumbler) and the SKILL.md Quick Start guide. Automated execution of commands with root privileges is a significant capability that requires strict user oversight.
[COMMAND_EXECUTION]: The skill facilitates the use of several offensive CLI tools (bettercap, hcitool, gatttool, zbstumbler, rtl_433) for signal analysis, replay, and potential disruption of IoT devices. These tools interact with the physical environment and their use is governed by regional radio regulations.
[INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection during the ingestion of external radio data.
Ingestion points: The skill processes external identifiers like Bluetooth device addresses (BD_ADDR), GATT characteristic handles, and signal frequencies provided by the user or discovered during scans.
Boundary markers: There are no explicit delimiters or instructions within the processing scripts to prevent the interpretation of malicious payloads that might be included in radio advertising packets or device metadata.
Capability inventory: The skill has the ability to execute shell commands with elevated privileges and access low-level radio hardware.
Sanitization: scripts/rf_recon.sh uses standard shell quoting for variables like $ADDR and $FREQ, but it does not perform strict input validation or filtering for these values before passing them to CLI tools.

wireless-rf