The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documents the use of various command-line utilities for firmware analysis, including binwalk for partition extraction, strings and grep for discovering sensitive data patterns, and readelf for architecture identification.\n- [EXTERNAL_DOWNLOADS]: The workflow includes examples of fetching firmware updates from vendor domains and downloading symbol tables from the official Volatility Foundation domain, which is a recognized and standard source in the memory forensics community.\n- [PRIVILEGE_ESCALATION]: The skill utilizes administrative commands like sudo chroot specifically for the purpose of emulating firmware root filesystems in an isolated environment. This is an industry-standard method for analyzing embedded systems.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted firmware binaries, which represents a potential attack surface if the analysis tools themselves contain vulnerabilities.\n
Ingestion points: Firmware binary files (e.g., firmware.bin) provided by the user or fetched from vendors.\n
Boundary markers: None explicitly defined in the prompts to distinguish between data and instructions; analysis relies on the agent's persona and manual researcher oversight.\n
Capability inventory: Subprocess execution for extraction tools, system-level emulation via qemu-user-static, and file system access.\n
Sanitization: No automated sanitization or validation of the input binary's internal structure is described.\n- [SAFE]: The skill contains comprehensive ethical guidelines and disclaimers across multiple files, explicitly restricting its use to authorized security research, audits, and educational contexts.

firmware-analyst