wireless-wpa2-attacks
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard command-line examples for wireless auditing tools including aircrack-ng, hcxdumptool, and hashcat. These instructions are intended for use within an authorized penetration testing context as specified in the skill metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill involves capturing and processing data from the wireless environment (SSIDs, handshakes, and PMKIDs). While this data is external and untrusted, the analysis surface is limited to the specific security tools used for offline cracking and discovery.
- Ingestion points: Network discovery output from airodump-ng and captured packet files (.pcapng) in SKILL.md.
- Boundary markers: The instructions specify targeting specific BSSIDs and SSIDs defined in a scope.txt file.
- Capability inventory: The skill uses subprocess calls to external wireless tools (aircrack-ng, hashcat) for data processing.
- Sanitization: None explicitly mentioned; the skill relies on the underlying tools to safely parse capture formats.
Audit Metadata