The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/agent.py utilizes subprocess.run to interface with external wireless auditing tools including iwconfig, airodump-ng, aircrack-ng, and wash. These calls are essential for the skill's primary purpose of network penetration testing. The implementation follows security best practices by using list-based arguments rather than shell strings, which mitigates standard shell injection risks.
[DATA_EXPOSURE]: The skill captures and processes wireless network metadata (SSIDs, BSSIDs, client MAC addresses) from the physical environment using the Scapy library. This data is used to generate a local security report and is not transmitted externally.
[PROMPT_INJECTION]: There is a potential surface for indirect prompt injection as the skill processes untrusted strings (SSIDs and probe requests) from the wireless environment. However, the risk is minimized by the script's use of safe subprocess execution methods and the local scope of its operations.

conducting-wireless-network-penetration-test