The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The script resources/scripts/qemu-emulator.sh makes extensive use of sudo to perform privileged system operations. This includes creating and configuring network bridges (ip link add, ip addr add), modifying kernel IP forwarding parameters (sysctl), altering firewall rules (iptables), and executing binaries within a chroot environment. These actions allow the agent to obtain root privileges on the host system or container.
[COMMAND_EXECUTION]: The skill relies on executing a wide range of system utilities and security tools through shell commands. The Python script binwalk-extractor.py uses subprocess.run to invoke tools like openssl, unsquashfs, and jefferson, while qemu-emulator.sh directly executes networking, emulation, and traffic capture commands (tcpdump).
[EXTERNAL_DOWNLOADS]: The skill facilitates the acquisition of external resources, providing instructions and examples for downloading firmware from arbitrary vendor URLs (e.g., http://vendor.com/...) and cloning tools from public repositories like firmadyne on GitHub.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted IoT firmware binaries. Because the skill has capabilities to execute commands, modify system configuration, and access the network, processing maliciously crafted firmware files presents a vulnerability surface where the agent could be influenced by data or instructions embedded within those files.

reverse-engineering-firmware-analysis