performing-arp-spoofing-attack-simulation
Audited by Socket on Sep 15, 2026
2 alerts found:
Securityx2SUSPICIOUS/HIGH-RISK skill. Its capabilities are internally consistent with its stated pentest purpose and there is no clear malware behavior, credential harvesting endpoint, or untrusted installer chain. However, it gives an AI agent explicit offensive MITM/ARP-spoofing capability with traffic interception and network disruption potential, so it should be treated as a high-risk security tool rather than a benign general-purpose skill.
This is an explicitly labeled ARP spoofing attack-simulation tool. It does not show evidence of malware such as data theft, persistence, or backdoor installation, but it intentionally sends forged ARP traffic that can enable man-in-the-middle interception or disrupt a local network. Use is appropriate only in an isolated, authorized test environment. The pasted code also contains syntax errors that prevent execution as written.