esp32-workbench-wifi
Controls WiFi settings and provisioning for ESP32 devices, enabling testing and management of WiFi connections and HTTP relays.
Install this skill
Security score
The esp32-workbench-wifi skill was audited on Mar 3, 2026 and we found 42 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 21 | curl http://192.168.0.87:8080/api/wifi/mode |
Curl to non-GitHub URL
| 24 | curl -X POST http://192.168.0.87:8080/api/wifi/mode \ |
Curl to non-GitHub URL
| 29 | curl -X POST http://192.168.0.87:8080/api/wifi/mode \ |
Curl to non-GitHub URL
| 55 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \ |
Curl to non-GitHub URL
| 60 | curl http://192.168.0.87:8080/api/wifi/ap_status |
Curl to non-GitHub URL
| 63 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop |
Curl to non-GitHub URL
| 72 | curl -X POST http://192.168.0.87:8080/api/wifi/sta_join \ |
Curl to non-GitHub URL
| 77 | curl -X POST http://192.168.0.87:8080/api/wifi/sta_leave |
Curl to non-GitHub URL
| 83 | curl http://192.168.0.87:8080/api/wifi/scan |
Curl to non-GitHub URL
| 92 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \ |
Curl to non-GitHub URL
| 97 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop |
Curl to non-GitHub URL
| 103 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \ |
Curl to non-GitHub URL
| 108 | curl "http://192.168.0.87:8080/api/wifi/events?timeout=30" |
Curl to non-GitHub URL
| 117 | curl -X POST http://192.168.0.87:8080/api/wifi/http \ |
Curl to non-GitHub URL
| 123 | curl -X POST http://192.168.0.87:8080/api/wifi/http \ |
Curl to non-GitHub URL
| 128 | curl -s -X POST http://192.168.0.87:8080/api/wifi/http \ |
Curl to non-GitHub URL
| 139 | curl "http://192.168.0.87:8080/api/wifi/events?timeout=30" |
Curl to non-GitHub URL
| 147 | curl -X POST http://192.168.0.87:8080/api/enter-portal \ |
Base64 decode operation
| 113 | **IMPORTANT:** Devices on the workbench AP (192.168.4.x) are NOT directly reachable from the development machine. Always use this relay to make HTTP requests to device endpoints (e.g. `/status`, `/ota |
Base64 decode operation
| 131 | | python3 -c "import json,sys,base64; r=json.load(sys.stdin); print(base64.b64decode(r['body']).decode())" |
External URL reference
| 8 | Base URL: `http://192.168.0.87:8080` |
External URL reference
| 21 | curl http://192.168.0.87:8080/api/wifi/mode |
External URL reference
| 24 | curl -X POST http://192.168.0.87:8080/api/wifi/mode \ |
External URL reference
| 29 | curl -X POST http://192.168.0.87:8080/api/wifi/mode \ |
External URL reference
| 55 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \ |
External URL reference
| 60 | curl http://192.168.0.87:8080/api/wifi/ap_status |
External URL reference
| 63 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop |
External URL reference
| 72 | curl -X POST http://192.168.0.87:8080/api/wifi/sta_join \ |
External URL reference
| 77 | curl -X POST http://192.168.0.87:8080/api/wifi/sta_leave |
External URL reference
| 83 | curl http://192.168.0.87:8080/api/wifi/scan |
External URL reference
| 92 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \ |
External URL reference
| 97 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop |
External URL reference
| 103 | curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \ |
External URL reference
| 108 | curl "http://192.168.0.87:8080/api/wifi/events?timeout=30" |
External URL reference
| 117 | curl -X POST http://192.168.0.87:8080/api/wifi/http \ |
External URL reference
| 119 | -d '{"method": "GET", "url": "http://192.168.4.2/status", "timeout": 10}' |
External URL reference
| 123 | curl -X POST http://192.168.0.87:8080/api/wifi/http \ |
External URL reference
| 125 | -d "{\"method\": \"POST\", \"url\": \"http://192.168.4.2/config\", \"headers\": {\"Content-Type\": \"application/json\"}, \"body\": \"$BODY\", \"timeout\": 10}" |
External URL reference
| 128 | curl -s -X POST http://192.168.0.87:8080/api/wifi/http \ |
External URL reference
| 130 | -d '{"method": "GET", "url": "http://192.168.4.x:8080/endpoint", "timeout": 10}' \ |
External URL reference
| 139 | curl "http://192.168.0.87:8080/api/wifi/events?timeout=30" |
External URL reference
| 147 | curl -X POST http://192.168.0.87:8080/api/enter-portal \ |
Install this skill with one command
/learn @sensorsiot/esp32-workbench-wifi