run_aircrack_action

What run_aircrack_action does on Pentester-MCP

AI agents invoke run_aircrack_action to trigger actions in Pentester-MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why run_aircrack_action is rated High

Aircrack-ng executes cryptographic attacks and network operations whose effects depend on arguments (target network, wordlist, etc.). This is Execute rather than Read (it modifies wireless state/performs active attacks) and not Destructive (attacks are reversible). High severity because unauthorized wireless network attacks could violate laws and cause network disruptions.

From the tool's definition Tool named 'run_aircrack_action' on a penetration testing server; aircrack-ng is a wireless network cracking/auditing tool that executes against live or captured wireless traffic. The prefix 'run_' indicates active execution of an external tool.

The rule that runs run_aircrack_action safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Pentester-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For run_aircrack_action, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "run_aircrack_action": {
      "limits": [
        {
          "counter": "run_aircrack_action_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about run_aircrack_action