Guide · Agent skill
How to use the Wireless & Hardware Attack agent skill
Updated · written with AI from the project's own documentation and checked against our catalogue data
The Wireless & Hardware Attack skill is a reference card for an AI agent. When your task involves WiFi, Bluetooth Low Energy, RFID/NFC, software-defined radio or embedded hardware interfaces, it tells the agent which tools and techniques to reach for. This guide explains what the skill does, how to install it, how to phrase requests so it triggers, and what you need before using it. It is intended for authorised security testing and study.
Quick start
- 1Download the ZIP. Download the wireless-hardware-attack skill ZIP from this page.
- 2Unzip into a skills folder. Extract it into ~/.claude/skills/ for personal use or into the project's .claude/skills/ folder for one project.
- 3Or upload in the Claude apps. In the Claude apps, go to Settings → Capabilities → Skills and upload the ZIP.
- 4Install the named tools. Install the tools you plan to use, such as aircrack-ng, hcxdumptool, proxmark3 or binwalk, from their own sources.
- 5Confirm written authorisation. Make sure you own the target or have written permission to test it, and that the radio use is lawful where you are.
- 6Ask with a specific request. Describe the interface, your goal and your authorisation in one message so the agent picks the skill.
What does the wireless-hardware-attack skill make the agent do?
The skill is a short list of wireless and hardware security approaches with the tool names attached. It covers WiFi (PMKID capture with hcxdumptool and hashcat, WPS attacks with reaver, and Evil Twin, with aircrack-ng listed), BLE (GATT enumeration with gatttool, and unauthenticated reads and writes or Just Works pairing), Zigbee (killerbee), NFC/RFID (proxmark3 cloning and mfoc for MIFARE), LoRa and SDR replay (rtl-sdr with GNU Radio), and hardware work such as UART baud-rate scanning to get a shell, JTAG/SWD and SPI flash reads, side-channel and timing analysis, fault injection, and firmware unpacking with binwalk.
The file itself is mostly Chinese-language and contains no executable code. It names tools and techniques; it does not walk through each one step by step.
How do you install the skill?
Download the skill ZIP from this page. Then choose one of two routes.
For a personal install, unzip the file into ~/.claude/skills/ so the skill folder sits there. For a project-only install, unzip it into the project's .claude/skills/ folder instead.
In the Claude apps you can instead upload the ZIP under Settings → Capabilities → Skills.
- Personal: ~/.claude/skills/
- Project: .claude/skills/ inside your project
- Claude apps: Settings → Capabilities → Skills, then upload the ZIP
How do you trigger the skill with a natural request?
You do not need a special command. The skill's description says it applies when attacking WiFi, BLE, RFID, SDR or hardware interfaces, so ask in those terms and name the target type and your goal. Stating that the work is authorised helps the agent frame the task correctly.
Requests that name a technique tend to work better than vague ones. Mention the interface (WiFi, BLE, NFC, UART, JTAG and so on) and the stage you are at, such as capture, enumeration, cloning or firmware extraction.
- Authorised WiFi assessment: "I have written permission to test the WPA2 network at our lab AP. Which tools should I use to capture a PMKID hash?"
- BLE: "Enumerate the GATT services on this BLE device I own and check whether reads and writes need authentication."
- RFID: "I'm testing our office access cards with proxmark3. What is the approach for MIFARE Classic cloning?"
- Firmware: "I have a router firmware dump. Which tools should unpack it with binwalk?"
What do you need before you start?
The skill references tools by name only: aircrack-ng, hcxdumptool, hashcat, reaver, killerbee, proxmark3, mfoc, rtl-sdr, GNU Radio, gatttool and binwalk. You must install these yourself; the source does not give installation steps for them. Real-world wireless work also needs compatible wireless adapters and hardware debuggers, which the file does not specify.
The skill runs no scripts and makes no network calls of its own.
- Tools listed by name: aircrack-ng, hcxdumptool, hashcat, reaver, killerbee, proxmark3, mfoc, rtl-sdr, GNU Radio, gatttool, binwalk
- Compatible wireless adapters and hardware debuggers (not specified in the file)
- Written authorisation for any target you test
What safety limits should you know?
These techniques are illegal to use against networks, devices or cards you do not own or have written permission to test. Replaying signals on licensed frequencies can break local law even in a lab, so check your local radio rules before any SDR work.
The skill itself runs no scripts and uses no network, so the risk lies in how you apply the named tools. Keep test scope written down and stay inside it.
- Only test what you own or have written permission to test.
- Check radio regulations before transmitting or replaying signals.
- Treat the skill as a checklist, not a verified procedure; confirm tool usage from each tool's own documentation.
What tips make the skill more useful?
Because the file is terse, use it to decide which tool to look up next rather than as a full manual. Ask the agent to explain each step's purpose and expected output, and check its answers against the official docs for each named tool.
Give the agent context about your setup, such as which adapter you have or which chip the device uses, so it can narrow the options to what your hardware supports.
- Use it as a shortlist of tools for a chosen attack category.
- Ask the agent to explain what each tool outputs at each stage.
- Provide your hardware details to get more relevant suggestions.
What people use it for
- Choosing which WiFi tools to use for a PMKID capture during an authorised wireless assessment.
- Planning BLE GATT enumeration to check for unauthenticated reads and writes on a device you own.
- Reviewing MIFARE-related tools with proxmark3 and mfoc during an access-card audit with permission.
- Deciding which tools to use to unpack a firmware image with binwalk.
- Building a quick checklist of hardware interfaces (UART, JTAG, SWD, SPI) for an IoT engagement.
Frequently asked questions
How do I install the wireless-hardware-attack skill?
Download the ZIP from this page and unzip it into ~/.claude/skills/ for personal use, or into a project's .claude/skills/ folder. In the Claude apps you can instead upload the ZIP under Settings → Capabilities → Skills.
What do I need to use this skill?
You need the tools it names, such as aircrack-ng, hcxdumptool, hashcat, proxmark3 and binwalk, installed separately. Real-world work also needs compatible wireless adapters and hardware debuggers, which the file does not specify.
Is the wireless-hardware-attack skill free?
The source is listed under the Apache-2.0 licence. The source does not state pricing, so check the licence terms on the repository for the details that apply to you.
Does the skill run code or access the internet?
No. The skill's SKILL.md contains no executable code, runs no scripts and uses no network. It is a text list of tools and techniques.
Can I use this skill to test a network I don't own?
No. These techniques are illegal to use without authorisation, so only test networks, devices and cards you own or have written permission to test.
What are good alternatives if this skill is too terse?
The source does not name alternatives. For step-by-step guidance, read the official documentation for each tool the skill names, such as aircrack-ng or proxmark3, and use the agent to explain their outputs.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
This skill suits penetration testers, security students and red teams who already know the basics and want a quick checklist of wireless and hardware tools. It is not a beginner tutorial, and anyone without written authorisation or an understanding of local radio rules should not use it. If you want a step-by-step wireless setup guide, pick a resource built for that purpose.
Download the skill