Skill UI

Expert firmware analyst for authorized embedded systems and IoT security assessments, covering firmware acquisition, extraction, emulation isolation, filesystem review, binary analysis, and vulnerability identification.

Detects hardcoded secrets like API keys, tokens, and passwords embedded in source code, configuration files, or Infrastructure as Code (IaC). Used when an agent can access its codebase to identify security vulnerabilities at rest. Focuses on secrets stored in files rather than runtime leaks.

This skill covers authorized hardware and embedded interface security research, including UART/JTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis. It requires physical access and basic hardware tooling for security assessments on devices you own or are authorized to test.