[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6P50CE6ZAE4M3MV52ZRDCXF":3,"skill-same:01M6P50CE6ZAE4M3MV52ZRDCXF":73},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":38,"linkOnly":39,"markdownContent":40,"markdownBody":41,"frontMatter":42,"refName":25,"commitSha":48,"skillDirectory":49,"forksCount":13,"repositoryHtmlUrl":50,"repositoryHomepageUrl":6,"ownerHtmlUrl":51,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":52,"install":53,"resources":66},"01M6P50CE6ZAE4M3MV52ZRDCXF","hardware-security",null,"Authorized hardware and embedded interface security research: UART\u002FJTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis.","duc-duy-1612\u002FOnline-Delivery-Systems-Web","duc-duy-1612","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F192231384?v=4","01M6NSDKQQDKVTHZ8DZMZ1VYY6","01M6NSDKW8DDVTQHBT1HBDDJPT",0,"MIT","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fhardware-security\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37],"hardware security","security","hardware","firmware analysis","github","reverse","interface","main","community","overview","discovery","analysis","Secure-Boot","firmware","https","license","boot","secure","debug","research","2026-11-10 10:12:30",false,"---\nname: hardware-security\ndescription: \"Authorized hardware and embedded interface security research: UART\u002FJTAG discovery, debug-pad triage, secure-boot overview, and offline firmware analysis.\"\nrisk: offensive\nsource: \"https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill\"\nsource_repo: \"zhaoxuya520\u002Freverse-skill\"\nsource_type: community\ndate_added: \"2026-08-25\"\nlicense: \"MIT\"\nlicense_source: \"https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill\u002Fblob\u002Fmain\u002FLICENSE\"\n---\n> **⚠️ AUTHORIZED USE ONLY**\n> This skill is for educational purposes or authorized security assessments only.\n> You must have explicit, written permission from the system owner before using this tool.\n> Misuse of this tool is illegal and strictly prohibited.\n\n> **Mandatory confirmation gate**\n> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:\n> 1. Ask the user to state the exact target URL, IP, account, or resource.\n> 2. Ask the user to confirm written authorization and the permitted scope.\n> 3. Show the exact command(s) and explain their expected effect.\n> 4. Wait for explicit confirmation in the current conversation.\n>\n> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.\n\n# Hardware \u002F Embedded Interface Security\n## When to Use\n\n- Physical security review of a device you own or are authorized to test.\n- Locating and documenting exposed debug interfaces.\n\n\n## 适用场景\n\n- UART \u002F JTAG \u002F SWD 调试口发现\n- 启动日志、root shell、引导打断\n- 配合拆机提取 Flash\n- 安全启动\u002F加密 Flash 的可行性评估（非破坏性优先）\n\n## 工作流\n\n```text\n□ 拆解授权设备；拍照标注测试点\n□ 万用表找 GND\u002FVCC\u002FTX\u002FRX；逻辑电平 1.8\u002F3.3\u002F5V\n□ USB-TTL 只读日志；记录波特率\n□ JTAG：枚举 IDCODE；评估是否锁定\n□ 提取镜像 → 交接 firmware-pentest \u002F ghidra\n```\n\n## 工具链\n\n| 工具 | 用途 |\n|------|------|\n| USB-TTL \u002F logic analyzer | UART |\n| J-Link \u002F CMSIS-DAP | 调试 |\n| bus pirate \u002F flipper（实验室） | 多协议 |\n| binwalk \u002F flashrom | 提取 |\n\n## 参考\n\n- `references\u002Fdebug-interface-triage.md`\n- `..\u002Ffirmware-pentest\u002F` `..\u002Fot-ics\u002F`\n\n## 路由上下文\n\n**上游**: MASTER R34  \n**MUST NOT**: 未授权拆机\u002F损坏他人设备\n\n## 任务完成自检\n\n- [ ] 是否记录接口电平与引脚图？\n- [ ] 镜像是否哈希保全？\n- [ ] Checklist？\n\n## Limitations\n\n- Requires physical access and basic HW tooling (adapters, multimeter).\n- Soldered or disabled debug ports raise the difficulty sharply.\n\n> Adapted from [zhaoxuya520\u002Freverse-skill](https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill) (MIT).\n","> **⚠️ AUTHORIZED USE ONLY**\n> This skill is for educational purposes or authorized security assessments only.\n> You must have explicit, written permission from the system owner before using this tool.\n> Misuse of this tool is illegal and strictly prohibited.\n\n> **Mandatory confirmation gate**\n> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:\n> 1. Ask the user to state the exact target URL, IP, account, or resource.\n> 2. Ask the user to confirm written authorization and the permitted scope.\n> 3. Show the exact command(s) and explain their expected effect.\n> 4. Wait for explicit confirmation in the current conversation.\n>\n> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.\n\n# Hardware \u002F Embedded Interface Security\n## When to Use\n\n- Physical security review of a device you own or are authorized to test.\n- Locating and documenting exposed debug interfaces.\n\n\n## 适用场景\n\n- UART \u002F JTAG \u002F SWD 调试口发现\n- 启动日志、root shell、引导打断\n- 配合拆机提取 Flash\n- 安全启动\u002F加密 Flash 的可行性评估（非破坏性优先）\n\n## 工作流\n\n```text\n□ 拆解授权设备；拍照标注测试点\n□ 万用表找 GND\u002FVCC\u002FTX\u002FRX；逻辑电平 1.8\u002F3.3\u002F5V\n□ USB-TTL 只读日志；记录波特率\n□ JTAG：枚举 IDCODE；评估是否锁定\n□ 提取镜像 → 交接 firmware-pentest \u002F ghidra\n```\n\n## 工具链\n\n| 工具 | 用途 |\n|------|------|\n| USB-TTL \u002F logic analyzer | UART |\n| J-Link \u002F CMSIS-DAP | 调试 |\n| bus pirate \u002F flipper（实验室） | 多协议 |\n| binwalk \u002F flashrom | 提取 |\n\n## 参考\n\n- `references\u002Fdebug-interface-triage.md`\n- `..\u002Ffirmware-pentest\u002F` `..\u002Fot-ics\u002F`\n\n## 路由上下文\n\n**上游**: MASTER R34  \n**MUST NOT**: 未授权拆机\u002F损坏他人设备\n\n## 任务完成自检\n\n- [ ] 是否记录接口电平与引脚图？\n- [ ] 镜像是否哈希保全？\n- [ ] Checklist？\n\n## Limitations\n\n- Requires physical access and basic HW tooling (adapters, multimeter).\n- Soldered or disabled debug ports raise the difficulty sharply.\n\n> Adapted from [zhaoxuya520\u002Freverse-skill](https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill) (MIT).\n",{"name":5,"risk":43,"source":44,"license":14,"date_added":45,"description":7,"source_repo":46,"source_type":26,"license_source":47},"offensive","https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill","2026-08-25","zhaoxuya520\u002Freverse-skill","https:\u002F\u002Fgithub.com\u002Fzhaoxuya520\u002Freverse-skill\u002Fblob\u002Fmain\u002FLICENSE","f3312ba749561b6159f477dbfc9313c875d40a56",".agents\u002Fskills_archive\u002Fhardware-security","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612","2026-10-25 23:50:58",{"source":8,"skillName":5,"commands":54,"prompt":64,"zipAvailable":65},[55,58,61],{"tool":56,"command":57},"npx","npx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill hardware-security",{"tool":59,"command":60},"bunx","bunx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill hardware-security",{"tool":62,"command":63},"pnpm","pnpm dlx skills add duc-duy-1612\u002FOnline-Delivery-Systems-Web --skill hardware-security","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fhardware-security\u002FSKILL.md",true,[67],{"path":68,"resourceType":69,"resourceTypeDesc":70,"sizeBytes":71,"sourceHtmlUrl":72},"references\u002Fdebug-interface-triage.md","REFERENCE","参考文档",217,"https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fhardware-security\u002Freferences\u002Fdebug-interface-triage.md",[74,103,127,148,176,200],{"skillNo":75,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":78,"categories":79,"keywords":85,"publishedAt":38},"01M6Q0FA5FZ410Z33Z3TFQ4DBA","zero-trust","Implement zero-trust network architecture. Configure identity-based access, micro-segmentation, and continuous verification. Use when implementing modern security architectures.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fzero-trust\u002FSKILL.md",[80],{"categoryNo":81,"categoryName":82,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000011","运维与部署","SCENARIO","使用场景",[86,87,88,89,90,91,76,92,93,94,95,96,26,25,97,98,99,100,101,102],"ZeRO","trust","zero trust","architecture","assessment","verification","segmentation","devops-security","access","configure","only","active","critical","scope","scripts","relevant","implementing",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":107,"categories":108,"keywords":109,"publishedAt":38},"01M6Q0F1YZJW3KX5FBKEVZ8CV4","zcode-delegate","Delegate coding tasks to the Z.AI ZCode CLI only when the user explicitly requests it, while the orchestrator retains review and landing responsibility.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fzcode-delegate\u002FSKILL.md",[],[110,111,112,113,114,115,116,117,118,119,120,121,122,96,123,26,124,125,98,126],"delegate","zcode","zcode delegate","review","cli","orchestration","tasks","run","Bash","model","node","read","orchestrator","files","desktop app","app","agent-orchestration",{"skillNo":128,"name":129,"nameZh":6,"description":130,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":131,"categories":132,"keywords":133,"publishedAt":38},"01M6Q0ETK41VGNMYEXW0T00AJN","youtube-transcript","Fetch YouTube transcripts through DeepAPI or local fallback tooling and save clean text output.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-transcript\u002FSKILL.md",[],[134,135,136,137,22,138,37,33,32,139,140,141,142,26,25,143,144,145,146,147],"transcript","youtube transcript","youtube","safe","codex","text","fetch","tooling","clean","local","output","deepapi","youtube transcripts","blob",{"skillNo":149,"name":150,"nameZh":6,"description":151,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":152,"categories":153,"keywords":165,"publishedAt":38},"01M6Q0EPPH2PVMDW40017F8WX0","youtube-transcript-skills","Fetch YouTube video transcripts, search videos\u002Fchannels, browse channels, and extract playlists via the getyoutubetranscript.com API - free tier, no card required.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-transcript-skills\u002FSKILL.md",[154,157,160],{"categoryNo":155,"categoryName":156,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":158,"categoryName":159,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000016","图像与多媒体",{"categoryNo":161,"categoryName":162,"taxonomyType":163,"taxonomyTypeDesc":164},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[134,135,136,166,137,167,22,138,33,168,169,170,171,140,172,26,25,173,174,175],"youtube transcript skills","gemini","search","api","Video","browse","api-integration","free","card","channels",{"skillNo":177,"name":178,"nameZh":6,"description":179,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":180,"categories":181,"keywords":186,"publishedAt":38},"01M6Q0EAB96PX83W5PTE8A0R8D","youtube-notetaker","Turn YouTube talks into local study notes with slides, transcripts, editable annotations, and a markdown-backed viewer.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-notetaker\u002FSKILL.md",[182,185],{"categoryNo":183,"categoryName":184,"taxonomyType":83,"taxonomyTypeDesc":84},"01JBSEEDCAT000000000000003","演示文稿",{"categoryNo":158,"categoryName":159,"taxonomyType":83,"taxonomyTypeDesc":84},[136,187,188,114,137,189,190,191,192,33,170,193,194,195,196,25,197,143,198,199],"youtube notetaker","notetaker","workflow","official","notes","code","markdown","slides","annotations","README","study","dair-academy","viewer",{"skillNo":201,"name":202,"nameZh":6,"description":203,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":204,"categories":205,"keywords":207,"publishedAt":38},"01M6Q0E55F0GW5MX48V8HXS8B5","youtube-full","Fetch YouTube transcripts, search videos, browse channels, and extract playlists via TranscriptAPI — no yt-dlp, no Google API key, works from any cloud server.","https:\u002F\u002Fgithub.com\u002Fduc-duy-1612\u002FOnline-Delivery-Systems-Web\u002Fblob\u002Fmain\u002F.agents\u002Fskills_archive\u002Fyoutube-full\u002FSKILL.md",[206],{"categoryNo":155,"categoryName":156,"taxonomyType":83,"taxonomyTypeDesc":84},[208,136,209,210,137,167,168,211,212,169,170,171,140,213,172,26,25,173,214,146],"youtube full","full","google","server","dlp","credits","automatic"]