The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use standard system utilities (e.g., fdisk, mount, stat, strings) and forensic tools (e.g., Sleuth Kit, foremost, bulk_extractor) to analyze disk images. These are used within their intended purpose for forensic analysis.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from disk images, system logs, and browser history which could theoretically contain malicious prompts. However, this is inherent to the forensic use case.
Ingestion points: Disk images, file systems, log files (/var/log/*), browser history, and registry hives.
Boundary markers: Not present.
Capability inventory: File system listing, file reading, metadata extraction, and pattern searching using tools like grep and strings via the Bash tool.
Sanitization: Not present; the skill focuses on raw evidence recovery and analysis.

disk-forensics