performing-packet-injection-attack

Warn

Audited by Socket on Sep 17, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive packet-injection and traffic-manipulation capabilities requiring root privileges and producing real network effects. There is no clear stealth, credential theft, or third-party exfiltration, so this is not confirmed malware, but it is a high-risk exploit/security skill.

Confidence: 91%Severity: 83%
SecurityMEDIUM
scripts/agent.py

The fragment is an active network penetration-testing and packet-injection tool, not passive monitoring code. It contains potentially disruptive scan, spoofing, malformed-packet, fragmentation, and evasion tests and lacks authorization and safety controls. No direct malware behavior, credential theft, persistence, or covert exfiltration is evident. Use should be restricted to explicitly authorized targets and isolated test environments.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Sep 17, 2026, 04:46 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-packet-injection-attack%2F@f7ab261ac6b375decb8d91e6a6bf63edbffdd465bfe939fdf4ac780750afb337