performing-packet-injection-attack

Warn

Audited by Snyk on Apr 7, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly requires and demonstrates use of root/sudo (e.g., sudo hping3, raw socket Scapy operations, iptables checks) to perform packet injection and spoofing, which instructs the agent to obtain privileged access and perform actions that change the machine's network state and could compromise the host.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 7, 2026, 12:59 PM
Issues
1