analyzing-disk-images

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes an example that embeds a BitLocker recovery key directly on the command line (sudo dislocker ... -p<48-digit-recovery-key>), which requires handling/outputting a secret verbatim and is an insecure credential-handling pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes offline disk-image handling where the workflow reads forensic content from a user-acquired image (e.g., via TSK/Plaso/bulk_extractor commands on /mnt/ewf/ewf1), which is outsider-provided free text at runtime if the image contains attacker-crafted strings.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill contains many explicit sudo-privileged commands (ewfacquire, dd, losetup, vgchange, cryptsetup, mount, dislocker, etc.) that instruct performing root-level operations which create loop devices, activate LVM, open encrypted volumes and modify kernel/device state, so it pushes actions that can compromise the host system state.