firmware-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md firmware acquisition and analysis workflow explicitly instructs fetching and ingesting firmware from public third‑party sources (e.g., "wget http://vendor.com/firmware/update.bin" and "HTTP/FTP from device web interface" in the Firmware Acquisition section), and the agent is expected to read/interpret that content as part of analysis and follow-up actions, exposing it to untrusted third‑party content.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt includes explicit privileged operations (sudo chroot, apt install, dd from /dev devices, running foreign firmware/binaries) that instruct the agent to obtain/use root privileges and modify the host system, which can compromise the machine's state.