The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/agent.py uses the subprocess.run() function to execute several system utilities, including iwconfig, airodump-ng, aircrack-ng, and wash, for capturing and cracking wireless traffic.
[PRIVILEGE_ESCALATION]: The documentation in SKILL.md and references/api-reference.md recommends using sudo with the airmon-ng command, which allows the execution of tools with root-level access to the system.
[INDIRECT_PROMPT_INJECTION]: The skill captures and logs environmental wireless data, which creates a potential surface for prompt injection attacks if an agent consumes the generated reports.
Ingestion points: The scan_access_points and detect_client_probes functions in scripts/agent.py capture SSID strings and probe requests from the air using Scapy's sniffing capabilities.
Boundary markers: The captured SSID data is not wrapped in protective delimiters or accompanied by warnings to ignore instructions embedded within the text.
Capability inventory: The skill has the ability to execute system commands through subprocess and perform file writing operations.
Sanitization: The script decodes captured information using errors="ignore" but performs no validation, filtering, or sanitization of the SSID content before including it in the output JSON report.

conducting-wireless-network-penetration-test