conducting-wireless-network-penetration-test
Audited by Socket on Sep 14, 2026
2 alerts found:
SecurityMalwareSUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with a wireless pentest playbook, but the skill teaches an AI agent to perform offensive security actions: deauthentication, evil twin deployment, credential capture, password cracking, and internal network probing. There is no obvious malicious installer or third-party credential proxy, so this is not confirmed malware; however, the skill materially increases attack capability and supports direct credential theft techniques, making it high security risk.
High-confidence malicious/dual-use wireless attack tooling. The module includes functions to capture WPA handshakes (airodump-ng), check WPS (wash), crack captured handshakes (aircrack-ng), and send deauthentication frames (scapy.sendp). Although not all attack functions are invoked in main(), the presence of these capabilities makes the package unsuitable for untrusted installation and warrants immediate review/audit.