The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill instructs the agent to use sudo to execute chroot and qemu-arm-static. Running commands with root privileges on extracted firmware filesystems poses a significant security risk if the firmware contains malicious binaries or exploits designed to escape the chroot environment.
[COMMAND_EXECUTION]: The instructions contain numerous shell commands for system interaction, including hardware interface access (screen /dev/ttyUSB0), filesystem manipulation (dd, unsquashfs), and binary analysis tools (binwalk, strings, readelf).
[EXTERNAL_DOWNLOADS]: The skill suggests using wget to download firmware images and apt to install system utilities like qemu-user-static. While placeholders are used for URLs, the workflow encourages downloading and processing external files.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data in the form of firmware binaries and extracted filesystems.
Ingestion points: Firmware binary files (firmware.bin), extracted filesystem directories (squashfs-root), and serial console logs.
Boundary markers: The skill includes a 'Mandatory confirmation gate' that requires the agent to ask for a target URL/IP and explicit user authorization before execution.
Capability inventory: Full shell command execution, sudo access, file system modification, and binary emulation capabilities are present across the workflow.
Sanitization: The instructions recommend performing extraction and emulation as an unprivileged user within a disposable VM to provide isolation.

firmware-analyst