performing-bandwidth-throttling-attack-simulation
Audited by Socket on Sep 15, 2026
2 alerts found:
Securityx2SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive network-attack capability. It uses legitimate tools and shows no credential theft or covert exfiltration, yet it enables disruptive real-world actions (traffic shaping, MITM throttling, connection exhaustion) and therefore carries high security risk despite low evidence of malware.
The code is a plainly written network testing tool with explicit traffic-throttling and UDP-flood functionality. Although labeled for authorized testing, it can disrupt a local interface and overwhelm a remote target, so it should only be used in an isolated, explicitly authorized test environment. No evidence of data theft, persistence, command injection through a shell, or obfuscated malware is present. The supplied fragment also appears syntactically incomplete at the final print(report call.