Wi-Fi Penetration Testing
Fail
Audited by Snyk on Feb 17, 2026
Risk Level: CRITICAL
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs capturing and producing "Cracked Credentials" (and shows example outputs like "KEY FOUND! [ password123 ]"), which requires the agent to output recovered network passwords and other sensitive values verbatim.
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This skill contains detailed, actionable instructions for capturing credentials and network traffic (handshake capture, deauthentication, evil-twin, ARP/DNS spoofing, packet capture and offline cracking), which enable unauthorized data exfiltration, credential theft, and network compromise if used without proper authorization.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running many sudo commands that modify system state (install packages, change network interfaces and drivers, write to /etc, enable IP forwarding, start services, kill processes), and directs actions that require elevated privileges and alter the host system—so it pushes the agent to compromise the machine state.
Audit Metadata