pcap-analysis

• Verdict: Pass
• Confidence: High
• Analyzed: Apr 14, 2026, 7:17 PM
• Findings: 0
• Version: 0.1.0

Overview

The skill's code and instructions are coherent with its stated purpose (PCAP analysis); it asks for no credentials or installs and contains only local analysis functions.

This skill appears coherent for offline PCAP analysis. Before installing: (1) review pcap_utils.py locally (it is included) to confirm behavior — it does not make network calls or exfiltrate data; (2) ensure scapy is available in your environment (the skill does not install dependencies); (3) be aware the SKILL.md examples hardcode '/root/...' paths — adjust paths to where your PCAPs actually live; (4) PCAP files can contain sensitive information (credentials, payloads), so only analyze captures from trusted sources or on isolated systems; (5) review detection thresholds in the code (entropy, SYN-ratio, port counts) and adjust them for your network to avoid false positives/negatives.