skills/mukul975/anthropic-cybersecurity-skills/performing-wifi-password-cracking-with-aircrack/Gen Agent Trust Hub
performing-wifi-password-cracking-with-aircrack
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python script
scripts/agent.pyuses thesubprocessmodule to execute standard wireless security binaries includingairmon-ng,airodump-ng,aireplay-ng,aircrack-ng,hcxdumptool, andhashcat. This is the primary intended functionality for automating the security assessment workflow. - [PRIVILEGE_ESCALATION]: The skill requires root/sudo privileges to manipulate wireless interfaces into monitor mode and to restart system services like
NetworkManager. This requirement is explicitly documented in the prerequisites and function references. - [INDIRECT_PROMPT_INJECTION]: The script processes untrusted data from the wireless environment, specifically SSIDs and BSSIDs discovered during scanning. * Ingestion points:
scripts/agent.py(scan_networks function) reads CSV output fromairodump-ng. * Boundary markers: Absent. * Capability inventory: The script has the capability to execute system commands and write to/tmpvia subprocess calls. * Sanitization: The script uses list-based arguments for allsubprocesscalls, which effectively prevents shell command injection from manipulated environment data.
Audit Metadata