The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/agent.py utilizes subprocess.run to interact with the chipsec framework, executing modules such as common.bios_wp and common.spi_lock for firmware integrity verification and hardware security checks.
[PRIVILEGE_ESCALATION]: The analysis workflow described in SKILL.md involves operations that require root or administrative privileges, such as mounting physical disk partitions (mount /dev/sda1) and direct hardware access for dumping SPI flash memory via flashrom or chipsec utilities.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of firmware dumps and filesystem artifacts. While it performs localized string scanning and binary analysis, the resulting technical findings are presented back to the AI agent, creating a theoretical attack surface for data-driven influence, which is a common characteristic of forensic analysis tools.

analyzing-uefi-bootkit-persistence