The Agent Skills Directory

[SAFE]: The skill is designed for legitimate cybersecurity incident response. The provided script agent.py uses the industry-standard pytsk3 library to perform read-only analysis of disk images and exports findings to a structured JSON report. It does not attempt to access sensitive host credentials or communicate over the network.
[INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection as its primary purpose is to parse untrusted data from forensic disk images.
Ingestion points: The agent.py script ingests binary data and metadata from disk images and MFT files provided by the user.
Boundary markers: The script does not currently utilize explicit boundary markers or instructions to the agent to ignore content within the recovered data.
Capability inventory: The script's capabilities are restricted to file system metadata extraction, file reading, and writing a local JSON report. It does not possess network or broad system execution capabilities.
Sanitization: The script implements basic sanitization by using decode('utf-8', errors='ignore') for file names to handle potentially malicious or corrupted string data.

performing-disk-forensics-investigation