performing-vlan-hopping-attack
Audited by Socket on Sep 15, 2026
2 alerts found:
Securityx2Purpose and capabilities are internally consistent for a VLAN-hopping pentest skill, and there is no clear credential theft or covert exfiltration. However, this is still a high-risk AI agent skill because it teaches and operationalizes offensive network attacks with live packet injection, interface changes, and potentially disruptive VTP actions; unclear provenance for `frogger` adds moderate supply-chain concern.
The code is a network penetration-testing or VLAN security assessment utility, not apparent malware. It actively sends DTP spoofing and double-tagged VLAN frames and invokes system networking commands, so unauthorized execution can alter network behavior or test and potentially exploit VLAN hopping. No credential theft, persistence, exfiltration, obfuscation, or remote-control behavior is evident. The supplied fragment also appears to have an incomplete final statement.