[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M7ADKAS3CVC0CA25VGPYTPQD":3,"skill-same:01M7ADKAS3CVC0CA25VGPYTPQD":45},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":18,"linkOnly":19,"markdownContent":20,"markdownBody":21,"frontMatter":22,"refName":23,"commitSha":24,"skillDirectory":25,"forksCount":26,"repositoryHtmlUrl":27,"repositoryHomepageUrl":28,"ownerHtmlUrl":29,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":30,"install":31,"resources":44},"01M7ADKAS3CVC0CA25VGPYTPQD","firmware-probe",null,"Leostruka\u002Fdevin-bundle","Leostruka","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F81370685?v=4","01M7AD8MAK63VDNAWRDRRRW04N","leandro ostruka","01M7AD8MBS65YDS1KMMV7YPM07",0,"MIT","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Fskills\u002Ffirmware-probe\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: firmware-probe\ndescription: Use when analyzing a declared firmware image or embedded artifact under an engagement contract (extraction, SBOM, CVE mapping, config\u002Fcredential review). Routes to extensions\u002Foffsec-tools\u002Fwrapper.py tools: binwalk, unblob, emba; deep RE of extracted binaries goes to re-binary.\ntriggers: [user, model]\n---\n\n# Firmware Probe\n\nFirmware\u002Fembedded analysis under contract, via\n`extensions\u002Foffsec-tools\u002Fwrapper.py` (domain `firmware`).\n\n## Contract (mandatory)\n\n`--target` (image path), `--window`, `--roe`. Extraction is read-only\nagainst the image; emulated boot is out of scope unless the ROE says so.\n\n## Tools\n\n| Tool | Mode | Backend | Use |\n|---|---|---|---|\n| `binwalk` | passive | wsl\u002Fnative | signature scan + extraction (v3, Rust) |\n| `unblob` | passive | docker | deep extraction, deps in image |\n| `emba` | passive | docker | full audit: SBOM, CVEs, configs, secrets scan |\n\n## Commands\n\n```bash\nW=extensions\u002Foffsec-tools\u002Fwrapper.py\n\npython $W run --tool binwalk --target fw.bin --window \"...\" --roe \"...\" \\\n  --backend wsl -- -Me fw.bin\npython $W run --tool unblob --target fw.bin --window \"...\" --roe \"...\" \\\n  --backend docker -- fw.bin\npython $W run --tool emba --target fw.bin --window \"...\" --roe \"...\" \\\n  --backend docker -- -f \u002Fwork\u002Ffw.bin -l \u002Fwork\u002Femba_logs\n```\n\nDocker backend auto-mounts the target's directory read-only at `\u002Fwork`\nand rewrites the target arg. Extracted binaries needing real RE go to\n`re-binary` (rea-ops wrapper, same contract).\n\n## Workflow\n\n1. `binwalk`\u002F`unblob` to unpack; hash the image (`sha256`) first.\n2. Inventory filesystem: versions, init scripts, certs, configs.\n3. `emba` for SBOM + CVE correlation when a full report is needed.\n4. Interesting binaries -> `re-binary`; interesting services ->\n   `net-probe`-style reasoning (offline only).\n\n## Evidence\n\nPer finding: image sha256, extraction tool+version, file path inside\nimage, CVE\u002FSBOM reference, confidence. Emba\u002FCVE hits are `likely` until\nversion-confirmed in the extracted filesystem.\n\n## Boundaries\n\n- Analysis only; no flashing or writing to live devices.\n- Full device emulation (firmadyne\u002FFirmAE class) is native-linux-only --\n  report `unsupported_platform` on this host rather than approximating.\n- Found secrets are evidence of exposure, not material for use.\n","# Firmware Probe\n\nFirmware\u002Fembedded analysis under contract, via\n`extensions\u002Foffsec-tools\u002Fwrapper.py` (domain `firmware`).\n\n## Contract (mandatory)\n\n`--target` (image path), `--window`, `--roe`. Extraction is read-only\nagainst the image; emulated boot is out of scope unless the ROE says so.\n\n## Tools\n\n| Tool | Mode | Backend | Use |\n|---|---|---|---|\n| `binwalk` | passive | wsl\u002Fnative | signature scan + extraction (v3, Rust) |\n| `unblob` | passive | docker | deep extraction, deps in image |\n| `emba` | passive | docker | full audit: SBOM, CVEs, configs, secrets scan |\n\n## Commands\n\n```bash\nW=extensions\u002Foffsec-tools\u002Fwrapper.py\n\npython $W run --tool binwalk --target fw.bin --window \"...\" --roe \"...\" \\\n  --backend wsl -- -Me fw.bin\npython $W run --tool unblob --target fw.bin --window \"...\" --roe \"...\" \\\n  --backend docker -- fw.bin\npython $W run --tool emba --target fw.bin --window \"...\" --roe \"...\" \\\n  --backend docker -- -f \u002Fwork\u002Ffw.bin -l \u002Fwork\u002Femba_logs\n```\n\nDocker backend auto-mounts the target's directory read-only at `\u002Fwork`\nand rewrites the target arg. Extracted binaries needing real RE go to\n`re-binary` (rea-ops wrapper, same contract).\n\n## Workflow\n\n1. `binwalk`\u002F`unblob` to unpack; hash the image (`sha256`) first.\n2. Inventory filesystem: versions, init scripts, certs, configs.\n3. `emba` for SBOM + CVE correlation when a full report is needed.\n4. Interesting binaries -> `re-binary`; interesting services ->\n   `net-probe`-style reasoning (offline only).\n\n## Evidence\n\nPer finding: image sha256, extraction tool+version, file path inside\nimage, CVE\u002FSBOM reference, confidence. Emba\u002FCVE hits are `likely` until\nversion-confirmed in the extracted filesystem.\n\n## Boundaries\n\n- Analysis only; no flashing or writing to live devices.\n- Full device emulation (firmadyne\u002FFirmAE class) is native-linux-only --\n  report `unsupported_platform` on this host rather than approximating.\n- Found secrets are evidence of exposure, not material for use.\n",{},"main","02b95ddb62959a00b3c31442c2046aca0d19563c","skills\u002Ffirmware-probe",1,"https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle","https:\u002F\u002Fleostruka.github.io\u002Fdevin-bundle\u002F","https:\u002F\u002Fgithub.com\u002FLeostruka","2026-11-15 05:19:58",{"source":7,"skillName":5,"commands":32,"prompt":42,"zipAvailable":43},[33,36,39],{"tool":34,"command":35},"npx","npx skills add Leostruka\u002Fdevin-bundle --skill firmware-probe",{"tool":37,"command":38},"bunx","bunx skills add Leostruka\u002Fdevin-bundle --skill firmware-probe",{"tool":40,"command":41},"pnpm","pnpm dlx skills add Leostruka\u002Fdevin-bundle --skill firmware-probe","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Fskills\u002Ffirmware-probe\u002FSKILL.md",true,[],[46,53,60,67,74,81],{"skillNo":47,"name":48,"nameZh":6,"description":49,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":50,"categories":51,"keywords":52,"publishedAt":18},"01M7E0K3MG2XC4FSRV0MK6SFR1","montador-de-ideias","Use when assembling, expanding, or elevating a raw project idea or initial prompt into an ultra-detailed, first-principles dossier and compiled master prompt with journalistic OSINT market research, Tech Lead and Staff Architect justifications, atomic and modular hardening\u002Foptimization, and high-impact contact surfaces.","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Fskills\u002Fmontador-de-ideias\u002FSKILL.md",[],[],{"skillNo":54,"name":55,"nameZh":6,"description":56,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":57,"categories":58,"keywords":59,"publishedAt":18},"01M7E0J7JJWZ8QMK01RZ3B3C9Z","git-github-adaptive-engineering","Use when any task touches git history, GitHub issues\u002FPRs\u002Freleases\u002FCI, repo governance, or branch and merge decisions. Runs the Fase Zero situational-awareness battery, picks one of five delivery flows via the adaptive decision engine, and enforces commit\u002FPR information-density standards. Orchestrates the gh, git-workflows, github-actions, pr, and debug\u002Ffinish skills.","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Fskills\u002Fgit-github-adaptive-engineering\u002FSKILL.md",[],[],{"skillNo":61,"name":62,"nameZh":6,"description":63,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":64,"categories":65,"keywords":66,"publishedAt":18},"01M7E0GJFRPFEVQQMXEM58EWDM","adaptive-agenda-calendar-routine-engine","Use when planning or executing work across hours, days, weeks, or sprints. Turns the calendar into a strict time-blocked agenda (HH:MM-HH:MM blocks carrying a routine profile, expected inputs, and a handoff output artifact), runs the 5-stage cognitive flow (Radar and Hunt -> Triage plus Steve Jobs conception -> workbench manifest -> >=32-cycle loop -> Close plus Open-Minded Scrum), and unfolds macro calendar milestones into micro agenda blocks through extensions\u002Fgcal\u002Fwrapper.py.","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Fskills\u002Fadaptive-agenda-calendar-routine-engine\u002FSKILL.md",[],[],{"skillNo":68,"name":69,"nameZh":6,"description":70,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":71,"categories":72,"keywords":73,"publishedAt":18},"01M7AE2K9FTY0BVS48N0A9JFKF","demo","Use when demonstrating a skill in a fixture project.","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fdevin-config\u002Fproject\u002F.devin\u002Fskills\u002Fdemo\u002FSKILL.md",[],[],{"skillNo":75,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":78,"categories":79,"keywords":80,"publishedAt":18},"01M7AE2G3DP38PTV3B1N7MW5TS","duplicate-skill","Use when testing duplicate skill name detection.","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fdevin-config\u002Fproject\u002F.devin\u002Fskills\u002Fbeta\u002FSKILL.md",[],[],{"skillNo":82,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":83,"categories":84,"keywords":85,"publishedAt":18},"01M7AE2DBR8ZHT6T875MJ392GK","https:\u002F\u002Fgithub.com\u002FLeostruka\u002Fdevin-bundle\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Fdevin-config\u002Fproject\u002F.devin\u002Fskills\u002Falpha\u002FSKILL.md",[],[]]