firmware-analyst
Warn
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions utilize
sudoto performchrootoperations during firmware emulation, providing elevated system privileges. - [EXTERNAL_DOWNLOADS]: The skill performs remote downloads of firmware files from external URLs using the
wgettool. - [PROMPT_INJECTION]: The skill ingests untrusted firmware binaries for analysis using tools like
binwalkandstrings. There are no boundary markers or sanitization logic present to prevent embedded instructions in the firmware from influencing the agent's behavior. Ingestion Point: firmware.bin (SKILL.md). Boundary Markers: Absent. Capability Inventory: sudo, chroot, qemu, gcc. Sanitization: Absent.
Audit Metadata