Firmware Analyst

dokhacgiakhoa/firmware-analyst

Expert firmware analyst specializing in embedded systems, IoT security, and hardware reverse engineering. Masters firmware extraction, analysis, and vulnerability research for routers, IoT devices, automotive systems, and industrial controllers. Use PROACTIVELY for firmware security audits, IoT penetration testing, or embedded systems research.

2k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

505

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI --skill firmware-analyst

What comes with it

7 258 bytes besides the instruction

sub-skills/analysis-tools.md

sub-skills/appropriate-use.md

sub-skills/authentication-issues.md

sub-skills/checklist.md

sub-skills/command-injection.md

sub-skills/emulation.md

sub-skills/extraction-tools.md

sub-skills/finding-1-title.md

sub-skills/full-system-emulation-with-firmadyne.md

sub-skills/hardware-methods.md

sub-skills/hardware-tools.md

sub-skills/information-disclosure.md

sub-skills/memory-corruption.md

sub-skills/never-assist-with.md

sub-skills/phase-1-identification.md

sub-skills/phase-2-extraction.md

sub-skills/phase-3-file-system-analysis.md

sub-skills/phase-4-binary-analysis.md

sub-skills/qemu-user-mode-emulation.md

sub-skills/reporting-template.md

The instruction itself

7 sections, as written by the author

Download from vendor

wget http://vendor.com/firmware/update.bin

Extract from device via debug interface

UART console access

screen /dev/ttyUSB0 115200

Copy firmware partition

dd if=/dev/mtd0 of=/tmp/firmware.bin

Extract via network protocols

TFTP during boot

HTTP/FTP from device web interface


## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Hardware Methods](./sub-skills/hardware-methods.md)
### 2. [Phase 1: Identification](./sub-skills/phase-1-identification.md)
### 3. [Phase 2: Extraction](./sub-skills/phase-2-extraction.md)
### 4. [Phase 3: File System Analysis](./sub-skills/phase-3-file-system-analysis.md)
### 5. [Phase 4: Binary Analysis](./sub-skills/phase-4-binary-analysis.md)
### 6. [Authentication Issues](./sub-skills/authentication-issues.md)
### 7. [Command Injection](./sub-skills/command-injection.md)
### 8. [Memory Corruption](./sub-skills/memory-corruption.md)
### 9. [Information Disclosure](./sub-skills/information-disclosure.md)
### 10. [Extraction Tools](./sub-skills/extraction-tools.md)
### 11. [Analysis Tools](./sub-skills/analysis-tools.md)
### 12. [Emulation](./sub-skills/emulation.md)
### 13. [Hardware Tools](./sub-skills/hardware-tools.md)
### 14. [QEMU User-Mode Emulation](./sub-skills/qemu-user-mode-emulation.md)
### 15. [Full System Emulation with Firmadyne](./sub-skills/full-system-emulation-with-firmadyne.md)
### 16. [Checklist](./sub-skills/checklist.md)
### 17. [Reporting Template](./sub-skills/reporting-template.md)
### 18. [Finding 1: Title](./sub-skills/finding-1-title.md)
### 19. [Appropriate Use](./sub-skills/appropriate-use.md)
### 20. [Never Assist With](./sub-skills/never-assist-with.md)

How to use it

Copy the folder

Take dokhacgiakhoa/firmware-analyst from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.