routeros-sniffer
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of several CLI tools for networking and virtualization, including
tshark,qemu-system-x86_64,curl, andscpto manage packet captures and interact with the RouterOS REST API. - [PRIVILEGE_ESCALATION]: Documentation in
references/tzsp-receivers.mdinstructs the user to usesudo apt install tshark, which requires administrative privileges on the host system to install dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface where an agent could ingest untrusted data from network packets.
- Ingestion points: Live output from
tsharkand the contents of downloaded.pcapfiles as described inSKILL.mdandreferences/tzsp-receivers.md. - Boundary markers: None present; there are no instructions to the agent to treat packet data as untrusted or to ignore embedded commands.
- Capability inventory: The skill utilizes shell execution for
tshark,curl, andqemucommands. - Sanitization: No sanitization, validation, or filtering of the captured packet payload is specified before the agent processes the information.
Audit Metadata