skills/mukul975/anthropic-cybersecurity-skills/performing-mobile-device-forensics-with-cellebrite/Gen Agent Trust Hub
performing-mobile-device-forensics-with-cellebrite
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill's workflow in
SKILL.mdincludes instructions to usesudofor installing system-level utilities (sudo apt-get install libimobiledevice-utils), which grants elevated permissions to the installation process. - [EXTERNAL_DOWNLOADS]: The skill initiates the download and installation of external Python packages (
aleapp,ileapp,pillow) and system utilities from public registries. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse untrusted data from mobile device extractions (e.g., message databases, browser history, photo metadata). This presents an attack surface where malicious data within an extraction could attempt to exploit the parsing logic or influence the agent's interpretation of the evidence.
- [COMMAND_EXECUTION]: The instructions involve executing a variety of shell commands for device interaction (
adb), acquisition (idevicebackup2,dd), and hashing (sha256sum), which require direct interaction with the host operating system and connected hardware.
Audit Metadata