attacking-bluetooth-nfc
Fail
Audited by Snyk on Jul 30, 2026
Risk Level: CRITICAL
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs capturing readable secrets (GATT characteristic values, card keys) and then replaying or embedding them verbatim in commands (e.g., char-write with , proxmark commands with -k FFFFFFFFFFFF), which would require the LLM to handle/output secret values directly.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The document provides explicit, actionable instructions and tooling for intercepting, exfiltrating, cloning, and replaying Bluetooth and NFC credentials and for proxying/relaying communications, enabling credential theft and unauthorized access.
Issues (2)
W007
HIGHInsecure credential handling detected in skill instructions.
E006
CRITICALMalicious code pattern detected in skill scripts.
Audit Metadata