firmware-analyst

Warn

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions utilize sudo to perform chroot operations during firmware emulation, providing elevated system privileges.
  • [EXTERNAL_DOWNLOADS]: The skill performs remote downloads of firmware files from external URLs using the wget tool.
  • [PROMPT_INJECTION]: The skill ingests untrusted firmware binaries for analysis using tools like binwalk and strings. There are no boundary markers or sanitization logic present to prevent embedded instructions in the firmware from influencing the agent's behavior. Ingestion Point: firmware.bin (SKILL.md). Boundary Markers: Absent. Capability Inventory: sudo, chroot, qemu, gcc. Sanitization: Absent.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 09:43 AM
Security Audit — agent-trust-hub — firmware-analyst