Skip to main content

esp32-workbench-wifi

Controls WiFi settings and provisioning for ESP32 devices, enabling testing and management of WiFi connections and HTTP relays.

Install this skill

or
0/100

Security score

The esp32-workbench-wifi skill was audited on Mar 3, 2026 and we found 42 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 21

Curl to non-GitHub URL

SourceSKILL.md
21curl http://192.168.0.87:8080/api/wifi/mode
medium line 24

Curl to non-GitHub URL

SourceSKILL.md
24curl -X POST http://192.168.0.87:8080/api/wifi/mode \
medium line 29

Curl to non-GitHub URL

SourceSKILL.md
29curl -X POST http://192.168.0.87:8080/api/wifi/mode \
medium line 55

Curl to non-GitHub URL

SourceSKILL.md
55curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \
medium line 60

Curl to non-GitHub URL

SourceSKILL.md
60curl http://192.168.0.87:8080/api/wifi/ap_status
medium line 63

Curl to non-GitHub URL

SourceSKILL.md
63curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop
medium line 72

Curl to non-GitHub URL

SourceSKILL.md
72curl -X POST http://192.168.0.87:8080/api/wifi/sta_join \
medium line 77

Curl to non-GitHub URL

SourceSKILL.md
77curl -X POST http://192.168.0.87:8080/api/wifi/sta_leave
medium line 83

Curl to non-GitHub URL

SourceSKILL.md
83curl http://192.168.0.87:8080/api/wifi/scan
medium line 92

Curl to non-GitHub URL

SourceSKILL.md
92curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \
medium line 97

Curl to non-GitHub URL

SourceSKILL.md
97curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop
medium line 103

Curl to non-GitHub URL

SourceSKILL.md
103curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \
medium line 108

Curl to non-GitHub URL

SourceSKILL.md
108curl "http://192.168.0.87:8080/api/wifi/events?timeout=30"
medium line 117

Curl to non-GitHub URL

SourceSKILL.md
117curl -X POST http://192.168.0.87:8080/api/wifi/http \
medium line 123

Curl to non-GitHub URL

SourceSKILL.md
123curl -X POST http://192.168.0.87:8080/api/wifi/http \
medium line 128

Curl to non-GitHub URL

SourceSKILL.md
128curl -s -X POST http://192.168.0.87:8080/api/wifi/http \
medium line 139

Curl to non-GitHub URL

SourceSKILL.md
139curl "http://192.168.0.87:8080/api/wifi/events?timeout=30"
medium line 147

Curl to non-GitHub URL

SourceSKILL.md
147curl -X POST http://192.168.0.87:8080/api/enter-portal \
medium line 113

Base64 decode operation

SourceSKILL.md
113**IMPORTANT:** Devices on the workbench AP (192.168.4.x) are NOT directly reachable from the development machine. Always use this relay to make HTTP requests to device endpoints (e.g. `/status`, `/ota
low line 131

Base64 decode operation

SourceSKILL.md
131| python3 -c "import json,sys,base64; r=json.load(sys.stdin); print(base64.b64decode(r['body']).decode())"
low line 8

External URL reference

SourceSKILL.md
8Base URL: `http://192.168.0.87:8080`
low line 21

External URL reference

SourceSKILL.md
21curl http://192.168.0.87:8080/api/wifi/mode
low line 24

External URL reference

SourceSKILL.md
24curl -X POST http://192.168.0.87:8080/api/wifi/mode \
low line 29

External URL reference

SourceSKILL.md
29curl -X POST http://192.168.0.87:8080/api/wifi/mode \
low line 55

External URL reference

SourceSKILL.md
55curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \
low line 60

External URL reference

SourceSKILL.md
60curl http://192.168.0.87:8080/api/wifi/ap_status
low line 63

External URL reference

SourceSKILL.md
63curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop
low line 72

External URL reference

SourceSKILL.md
72curl -X POST http://192.168.0.87:8080/api/wifi/sta_join \
low line 77

External URL reference

SourceSKILL.md
77curl -X POST http://192.168.0.87:8080/api/wifi/sta_leave
low line 83

External URL reference

SourceSKILL.md
83curl http://192.168.0.87:8080/api/wifi/scan
low line 92

External URL reference

SourceSKILL.md
92curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \
low line 97

External URL reference

SourceSKILL.md
97curl -X POST http://192.168.0.87:8080/api/wifi/ap_stop
low line 103

External URL reference

SourceSKILL.md
103curl -X POST http://192.168.0.87:8080/api/wifi/ap_start \
low line 108

External URL reference

SourceSKILL.md
108curl "http://192.168.0.87:8080/api/wifi/events?timeout=30"
low line 117

External URL reference

SourceSKILL.md
117curl -X POST http://192.168.0.87:8080/api/wifi/http \
low line 119

External URL reference

SourceSKILL.md
119-d '{"method": "GET", "url": "http://192.168.4.2/status", "timeout": 10}'
low line 123

External URL reference

SourceSKILL.md
123curl -X POST http://192.168.0.87:8080/api/wifi/http \
low line 125

External URL reference

SourceSKILL.md
125-d "{\"method\": \"POST\", \"url\": \"http://192.168.4.2/config\", \"headers\": {\"Content-Type\": \"application/json\"}, \"body\": \"$BODY\", \"timeout\": 10}"
low line 128

External URL reference

SourceSKILL.md
128curl -s -X POST http://192.168.0.87:8080/api/wifi/http \
low line 130

External URL reference

SourceSKILL.md
130-d '{"method": "GET", "url": "http://192.168.4.x:8080/endpoint", "timeout": 10}' \
low line 139

External URL reference

SourceSKILL.md
139curl "http://192.168.0.87:8080/api/wifi/events?timeout=30"
low line 147

External URL reference

SourceSKILL.md
147curl -X POST http://192.168.0.87:8080/api/enter-portal \
Scanned on Mar 3, 2026
View Security Dashboard