attacking-bluetooth-nfc

Fail

Audited by Snyk on Jul 30, 2026

Risk Level: CRITICAL
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs capturing readable secrets (GATT characteristic values, card keys) and then replaying or embedding them verbatim in commands (e.g., char-write with , proxmark commands with -k FFFFFFFFFFFF), which would require the LLM to handle/output secret values directly.

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). The document provides explicit, actionable instructions and tooling for intercepting, exfiltrating, cloning, and replaying Bluetooth and NFC credentials and for proxying/relaying communications, enabling credential theft and unauthorized access.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

E006
CRITICAL

Malicious code pattern detected in skill scripts.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 30, 2026, 01:16 AM
Issues
2
Security Audit — snyk — attacking-bluetooth-nfc