performing-wireless-network-penetration-test

Warn

Audited by Socket on Sep 20, 2026

3 alerts found:

SecurityAnomalyx2
SecurityMEDIUM
SKILL.md

The skill is internally consistent with its stated purpose, but that purpose is to equip an AI agent with offensive wireless intrusion capabilities, including credential harvesting and network disruption. This makes it high security risk even without obvious malware or suspicious installer behavior.

Confidence: 94%Severity: 90%
AnomalyLOW
scripts/agent.py

The code is a dual-use wireless penetration-testing utility. It conducts monitor-mode reconnaissance, captures handshakes, and supports offline password cracking, so unauthorized use could compromise nearby networks. Within this fragment, subprocess invocation is not shell-based and there is no evident exfiltration, persistence, destructive behavior, or host credential theft. The primary security concerns are authorization, insufficient input/path validation, and disclosure of recovered WPA keys in generated reports.

Confidence: 98%Severity: 55%
AnomalyLOW
references/workflows.md

No executable malware or supply-chain payload is present. The document describes dual-use wireless attack techniques, including credential harvesting and denial-of-service-like deauthentication, so unauthorized use would pose significant operational and legal risk. Further assessment would require the associated scripts or tooling, if any.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Sep 20, 2026, 01:47 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-wireless-network-penetration-test%2F@f6a205e2d2076780776a5d9a93fa6432c0b066f94fc7b3fff410138c0ae1a2f5