performing-wireless-network-penetration-test
Warn
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes elevated privileges via
sudoto runbettercap. This is a standard requirement for security tools performing raw wireless packet injection and interface management but represents a privilege escalation vector. - [DATA_EXFILTRATION]: The workflow involves capturing sensitive network data, including WPA handshakes and EAP credentials, and saving them to local files (e.g.,
creds.txt,corpguest-01.cap) for offline analysis. This constitutes local exposure of sensitive authentication material. - [PROMPT_INJECTION]: The skill processes untrusted wireless network metadata, such as SSIDs and BSSIDs, which could be crafted to influence agent behavior if the agent parses these results without proper sanitization.
- Ingestion points: Wireless scanning output from
airodump-ngandkismetdescribed in SKILL.md. - Boundary markers: No explicit delimiters or boundary markers are employed to isolate untrusted scan data from the agent's instructions.
- Capability inventory: The skill leverages high-privilege shell command execution (
airmon-ng,aireplay-ng,hostapd-mana) and local file system writes across multiple phases. - Sanitization: There is no evidence of validation or sanitization of external network identifiers (SSIDs) before they are processed by the agent or passed to CLI tools.
Audit Metadata