analyzing-firmware-images

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs reading and extracting secrets (e.g., cat rootfs/etc/shadow, searching for private keys and API tokens, and "Extract the key and demonstrate"), which requires the agent to handle and potentially output secret values verbatim.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs use of sudo and host-modifying operations (sudo chroot, sudo mount, running emulation with sudo), which require elevated privileges and can modify the machine's state.