Skip to main content
Glama

websex_aireplay

Execute aireplay-ng commands for authorized wireless testing, passing argv tokens directly without shell parsing from the selected engagement namespace and saving evidence artifacts.

Instructions

Run aireplay from the WebSex wireless toolkit. The container executes aireplay-ng directly with the supplied argv tokens; shell parsing is never used. Runs from the selected engagement namespace; use relative paths for engagement artifacts.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
stdinNo
argumentsYes
engagement_idYes
working_directoryNo.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations the description carries the full burden. It usefully discloses that shell parsing is never used (argv tokens passed directly) and the engagement namespace/relative-path scoping, which is genuinely beyond a schema. However it omits key operational traits for a wireless injection tool: monitor-mode requirement, whether it is disruptive/destructive to the target network, and permission prerequisites.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the operation then the execution semantics and path convention. No filler, though it could have spent its brevity budget on the undocumented parameters instead.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Return values are covered by the output schema, but for a four-parameter tool with 0% schema coverage and zero annotations the description leaves too much unstated: engagement_id and stdin are never described, and no prerequisites (wireless interface, monitor mode) are given. Inadequate for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the description only loosely maps 'supplied argv tokens' to the arguments array and 'relative paths' to working_directory. It says nothing about engagement_id (a required param) or stdin, so half the parameters remain unexplained in both schema and description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: run 'aireplay' via the container executing 'aireplay-ng' with supplied argv tokens. The tool's identity as a wireless injection/replay utility is unambiguous and distinguishable from airmon/airodump/aircrack siblings. It stops short of explicitly contrasting its role against those siblings, keeping it at a 4.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides implied usage context ('runs from the selected engagement namespace', 'use relative paths for engagement artifacts') but never says when to reach for this versus airodump, airmon, or aircrack. No exclusions or alternatives are named, so the agent must infer routing from the tool name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools