The Agent Skills Directory

[COMMAND_EXECUTION]: Employs standard shell commands such as mount, cp, and sqlite3 to interact with disk images and perform database queries on forensic artifacts. These operations are restricted to a local investigation environment.
[EXTERNAL_DOWNLOADS]: Instructs the installation of the pyhindsight Python package, which is a well-known and trusted open-source tool for parsing Chromium-based browser history and cache.
[SAFE]: While the skill accesses sensitive data files (like Chrome Cookies and Login Data), it does so within the context of a digital forensic investigation. No network operations or exfiltration patterns were identified that would suggest unauthorized data transfer.

extracting-browser-history-artifacts