S³ Wireshark Analysis

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:25 PM UTC
• Version:
  1.0.0

Overview

This is an instruction-only Wireshark guide whose sensitive packet-capture behavior is expected for its stated purpose.

Use this only for networks and PCAPs you are authorized to inspect. Prefer narrow capture filters, short capture windows, and offline analysis when possible; treat PCAPs, followed streams, exported files, and TLS key material as sensitive.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill instructs the user to begin live packet capture immediately and later includes file extraction and stream reconstruction steps that can expose credentials, session data, private communications, and downloaded content. Although the document mentions authorization and privacy later, the initial operational steps lack an explicit just-in-time warning or consent checkpoint before collecting sensitive network data, which increases the risk of accidental overcollection or privacy violations.

VirusTotal

65/65 vendors flagged this skill as clean.