performing-packet-injection-attack
Audited by Socket on Sep 17, 2026
2 alerts found:
Securityx2SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive packet-injection and traffic-manipulation capabilities requiring root privileges and producing real network effects. There is no clear stealth, credential theft, or third-party exfiltration, so this is not confirmed malware, but it is a high-risk exploit/security skill.
The fragment is an active network penetration-testing and packet-injection tool, not passive monitoring code. It contains potentially disruptive scan, spoofing, malformed-packet, fragmentation, and evasion tests and lacks authorization and safety controls. No direct malware behavior, credential theft, persistence, or covert exfiltration is evident. Use should be restricted to explicitly authorized targets and isolated test environments.