analyzing-disk-image-with-autopsy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests the forensic disk image (outsider-authored evidence) via Autopsy/TSK ingest modules and recovered file contents/metadata, which are then used to build reports and keyword/timeline outputs that can be fed into the agent/LLM context; additionally, the workflow downloads external hash sets (NSRL) from the public internet at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). This skill instructs running commands with sudo to install packages and to write into system directories like /opt, which explicitly requires elevated privileges and modifies the host system state.