performing-vlan-hopping-attack

Warn

Audited by Socket on Sep 15, 2026

2 alerts found:

Securityx2
SecurityMEDIUM
SKILL.md

Purpose and capabilities are internally consistent for a VLAN-hopping pentest skill, and there is no clear credential theft or covert exfiltration. However, this is still a high-risk AI agent skill because it teaches and operationalizes offensive network attacks with live packet injection, interface changes, and potentially disruptive VTP actions; unclear provenance for `frogger` adds moderate supply-chain concern.

Confidence: 91%Severity: 84%
SecurityMEDIUM
scripts/agent.py

The code is a network penetration-testing or VLAN security assessment utility, not apparent malware. It actively sends DTP spoofing and double-tagged VLAN frames and invokes system networking commands, so unauthorized execution can alter network behavior or test and potentially exploit VLAN hopping. No credential theft, persistence, exfiltration, obfuscation, or remote-control behavior is evident. The supplied fragment also appears to have an incomplete final statement.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:36 AM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-vlan-hopping-attack%2F@22d501eabef5c8621f2af03abfe9c0e98afac8f59c2f67d3de8e791082ca671e