The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/agent.py utilizes subprocess.run to execute the vol3 forensics tool. While the plugin list is hardcoded, the memory dump path is a variable provided at runtime.
[PRIVILEGE_ESCALATION]: The workflow documentation in SKILL.md provides commands for raw disk access (dd) and firmware dumping (flashrom) that necessitate administrative or root-level privileges.
[DYNAMIC_EXECUTION]: SKILL.md includes an embedded Python script within a bash heredoc that is executed dynamically during the analysis workflow to parse MBR data.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted binary samples (MBR/VBR/UEFI modules) from disk and firmware dumps. It lacks explicit boundary markers or sanitization while maintaining powerful capabilities like subprocess execution and raw hardware access, creating a surface for indirect prompt injection attacks.
[METADATA_POISONING]: There is a discrepancy between the author name 'mahipal' in the frontmatter and the copyright holder 'mukul975' in the license, which may lead to confusion regarding the skill's origin.

analyzing-bootkit-and-rootkit-samples