The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill explicitly instructs the agent to use sudo when extracting filesystems (e.g., sudo ffind /path/to/firmware.bin -e). While required for the described functionality of mounting/extracting filesystems, it encourages bypassing standard permission boundaries via the agent.
[COMMAND_EXECUTION]: The skill executes a CLI tool ffind. The documentation indicates this tool should be invoked from the iothackbot bin directory, implying the execution of a binary provided alongside the skill or within the specific tool suite.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and extract content from potentially untrusted firmware images and filesystems.
Ingestion points: File paths provided by the user which point to firmware images or binary blobs (SKILL.md).
Boundary markers: None identified.
Capability inventory: Execution of the ffind command, often with sudo privileges, and file system extraction to temporary or user-specified directories (SKILL.md).
Sanitization: None identified; the tool processes raw binary data from external sources and provides human-readable or machine-readable summaries.

ffind