# Firmware Audit > Audit firmware and embedded code for security vulnerabilities and best practices. Use when user says "firmware audit", "embedded security", "IoT security check", or working with C/C++/Rust firmware. Checks for hardcoded credentials, buffer overflows, and insecure boot. Use when this capability is needed. - Skill: `tomevault-io/firmware-audit` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/firmware-audit` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/firmware-audit/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/firmware-audit --- Perform a security audit on firmware/embedded code. ## Context Source files: !`find . -name "*.c" -o -name "*.h" -o -name "*.cpp" -o -name "*.rs" 2>/dev/null | head -20` Build system: !`ls Makefile CMakeLists.txt build.rs Cargo.toml platformio.ini 2>/dev/null` ## Target: $ARGUMENTS ## Instructions 1. Scan for hardcoded credentials (passwords, keys, tokens) 2. Check for buffer overflow risks (unbounded copies, format strings) 3. Verify secure boot and update mechanisms 4. Audit communication protocols for encryption and authentication 5. Check physical interface security (debug ports, JTAG) 6. Generate structured security audit report --- > Source: [gr1m0h/dot](https://github.com/gr1m0h/dot) — distributed by [TomeVault](https://tomevault.io).