How do I install the Hardware Security skill?

Run npx skillmds@latest add netvar1337/hardware-security in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Hardware Security skill do?

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support. It is listed under Product & Planning on SkillMD.

Is Hardware Security safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Hardware Security?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Hardware Security free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under MIT.

Who published Hardware Security?

netvar1337 (@netvar1337) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Hardware Security by netvar1337 — Agent Skill

Name: Hardware Security
Author: netvar1337

File contents

Bundled with Unleash skills pack. Upstream: https://github.com/zhaoxuya520/reverse-skill

Hardware / Embedded Interface Security

ACTION REQUIRED (execute immediately after reading)

NOW: confirm physical access authorization and device ownership
NOW: ESD/power safety; read-only probing by default
NEXT: combine with firmware-pentest for image analysis
ACT: enclosure and debug interface identification → consoles → extraction

Applicable Scenarios

UART / JTAG / SWD debug port discovery
Boot logs, root shell, boot interruption
Flash extraction alongside teardown
Secure boot/encrypted Flash feasibility assessment (non-destructive first)

Workflow

□ Disassemble the authorized device; photograph and label test points
□ Find GND/VCC/TX/RX with a multimeter; logic levels 1.8/3.3/5V
□ USB-TTL read-only logging; record the baud rate
□ JTAG: enumerate IDCODE; assess whether it is locked
□ Extract the image → hand off to firmware-pentest / ghidra

Toolchain

Tool	Purpose
USB-TTL / logic analyzer	UART
J-Link / CMSIS-DAP	Debugging
bus pirate / flipper (lab)	Multi-protocol
binwalk / flashrom	Extraction

References

references/debug-interface-triage.md
../firmware-pentest/ ../ot-ics/

Routing Context

Upstream: MASTER R34
MUST NOT: unauthorized teardown/damaging others' equipment

Task Completion Self-Check

Interface levels and pinout recorded?
Image preserved with hashes?
Checklist?

Frequently asked questions

Hardware Security