Security audit
Security checks across malware telemetry and agentic risk
This skill is clearly a WiFi attack C2 bridge, and while that purpose is disclosed, it gives high-impact attack and telemetry capabilities without enough safety, authorization, or data-handling limits.
Install only for a lab or authorized security engagement. Before use, require written permission for every target network, restrict the bridge to trusted networks, use TLS and authentication for heartbeats, avoid collecting precise GPS unless necessary, and treat deauth, evil twin, beacon flooding, downgrade, and kill actions as high-risk operations that need explicit human approval.
curl http://0.0.0.0:8553/skill | jq
# Agent heartbeat (Crabfleet protocol)
curl -X POST http://0.0.0.0:8553/fleet/heartbeat \
-H "Content-Type: application/json" \
-d '{"card_id":"pi-stalker-01","status":"online","uptime_seconds":3600,"battery_pct":85}'VirusTotal findings are pending for this skill version.
No suspicious patterns detected.