Skip to content
Development
Skill

/hardware-security

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

From plugin
coco
386200 skills53 agents41 commands
Install
$ npx -y skills add coco-research/coco --skill hardware-security --agent claude-code

How it fires

How this skill gets triggered: by you, by Claude, or both.

  • Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
  • You can call itInvoke it directly when you want it.
  • Slash command/hardware-security

Context preview

The summary Claude sees to decide when to auto-load this skill.

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

SKILL.md

hardware-security.SKILL.md
name: hardware-security
description: Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.
user-invocable: true

Hardware / Embedded Interface Security

适用场景

  • UART / JTAG / SWD 调试口发现
  • 启动日志、root shell、引导打断
  • 配合拆机提取 Flash
  • 安全启动/加密 Flash 的可行性评估(非破坏性优先)

工作流

□ 拆解授权设备;拍照标注测试点
□ 万用表找 GND/VCC/TX/RX;逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志;记录波特率
□ JTAG:枚举 IDCODE;评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

| 工具 | 用途 | |------|------| | USB-TTL / logic analyzer | UART | | J-Link / CMSIS-DAP | 调试 | | bus pirate / flipper(实验室) | 多协议 | | binwalk / flashrom | 提取 |

参考

  • `references/debug-interface-triage.md`
  • `../firmware-pentest/` `../ot-ics/`
Ships withcoco

CoCo Super Intelligence is the orchestration layer that turns Claude Code, Cursor, or Codex into an engineering department: a routed advisory board, 226 skills, 386 commands, persistent state. Local. Open-core — MIT core; Super Intelligence is proprietary, own-use.

Get the whole plugin

Other skills on coco.