wireless-security-wifi-pentesting

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s capabilities are coherent with its stated pentesting purpose, but that stated purpose is an offensive Wi-Fi attack playbook for an AI agent. It includes credential harvesting, phishing-style rogue AP workflows, denial-of-service, and enterprise auth capture, plus one third-party git-clone-and-build step from an unrelated org. Official Kali APT installs lower pure supply-chain concern, but the overall security risk remains high because the skill enables offensive real-world attacks and credential capture.

Confidence: 95%Severity: 89%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:11 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fsecurity-skills%2Fwireless-security-wifi-pentesting%2F@14daffcdb014eb5d4d1be140eee152ff58ca06b802898fd5b928d32241c2acd1