skills/mukul975/anthropic-cybersecurity-skills/performing-wireless-network-penetration-test/Gen Agent Trust Hub
performing-wireless-network-penetration-test
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/agent.pyfile usessubprocess.runto execute various wireless security tools includingairmon-ng,airodump-ng,aircrack-ng,wash, andreaverto automate pentesting tasks. - [PRIVILEGE_ESCALATION]: The instructions in
SKILL.mdinclude commands such assudo bettercapandairmon-ng check kill, which require administrative privileges to interact with hardware interfaces and manage system processes. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external wireless networks by parsing scan results in
scripts/agent.pyandscripts/process.py. - Ingestion points: Network metadata is parsed from CSV files generated by
airodump-ngin both Python scripts. - Boundary markers: The scripts do not use explicit delimiters or instructions to ignore potential injection within network names (SSIDs).
- Capability inventory: The agent has the capability to execute shell commands and write files to the local system.
- Sanitization: The parsing logic relies on simple comma separation and does not strictly validate or sanitize SSID content before it is included in generated reports or assessment findings.
Audit Metadata