技能 chipsec
📦

chipsec

内容修订 r2 高风险 ⚙️ 外部命令📁 文件系统访问

使用 CHIPSEC 分析 UEFI 固件

如果没有可重复的工具，固件转储很难审查。此技能指导离线 CHIPSEC 工作流，用于威胁检查、清单生成、结构解码和报告。

支持: Claude Codex Code(CC)
⚠️ 38 差

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "chipsec" from https://skillstore.io/skills/brownfinesecurity-chipsec.md and its manifest at https://skillstore.io/api/skills/brownfinesecurity-chipsec/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/brownfinesecurity-chipsec.md 已签名 manifest GET /api/skills/brownfinesecurity-chipsec/manifest 已签名 lockfile GET /api/skills/brownfinesecurity-chipsec/lockfile

测试它

正在使用“chipsec”。 用户提供一份笔记本电脑 BIOS ROM，并请求进行初步审查。

预期结果:

该技能运行威胁扫描，创建 EFI 清单，解码固件，并总结 CHIPSEC 是否报告了已知匹配项。

正在使用“chipsec”。 用户在供应商更新后提供旧版和新版固件映像。

预期结果:

该技能比较清单，列出已更改的模块，标记意外差异，并建议对高影响组件进行人工审查。

正在使用“chipsec”。 用户提供来自授权调查的可疑 IoT 固件转储。

预期结果:

该技能检查已知签名，提取可用结构，记录相关哈希，并准备简明的事件响应摘要。

安全审计

高风险
v9 • 2026/7/23 打开版本化报告

Most detections are false positives caused by Markdown syntax, defensive malware terminology, and documented offline diagnostic commands. Six findings are confirmed in duplicated setup guidance that invokes sudo on a derived path and makes CHIPSEC log directories world-writable. No prompt injection, data exfiltration intent, or malware-enabling behavior was found.

1
已扫描文件
536
分析行数
4
复核项
0
已忽略误报

已确认安全问题 (2)

高
SKILL.md:30
Overly permissive chmod
sudo chmod 777 "$CHIPSEC_DIR/logs"
The setup explicitly applies sudo chmod 777 to a CHIPSEC logs directory. World-writable permissions allow any local user to replace files or manipulate paths used by later analysis.
高
SKILL.md:386
Overly permissive chmod
sudo chmod 777 "$CHIPSEC_DIR/logs"
The setup explicitly applies sudo chmod 777 to a CHIPSEC logs directory. World-writable permissions allow any local user to replace files or manipulate paths used by later analysis.
能力复核项 (4)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高
SKILL.md:29
sudo privilege escalation
sudo mkdir -p "$CHIPSEC_DIR/logs"
The setup derives CHIPSEC_DIR from locations including the user-controlled ~/.local tree and does not reject an empty result before invoking sudo. Root can therefore create a directory at an unintended or untrusted path.
高
SKILL.md:30
sudo privilege escalation
sudo chmod 777 "$CHIPSEC_DIR/logs"
The command deliberately uses sudo to apply mode 777 to a derived package path. This grants every local user write access and can expose privileged CHIPSEC activity to file or symlink manipulation.
高
SKILL.md:385
sudo privilege escalation
sudo mkdir -p "$CHIPSEC_DIR/logs"
The setup derives CHIPSEC_DIR from locations including the user-controlled ~/.local tree and does not reject an empty result before invoking sudo. Root can therefore create a directory at an unintended or untrusted path.
高
SKILL.md:386
sudo privilege escalation
sudo chmod 777 "$CHIPSEC_DIR/logs"
The command deliberately uses sudo to apply mode 777 to a derived package path. This grants every local user write access and can expose privileged CHIPSEC activity to file or symlink manipulation.

风险因素

⚙️ 外部命令 (50)
SKILL.md:25 SKILL.md:27-31 SKILL.md:31-35 SKILL.md:35-37 SKILL.md:37-42 SKILL.md:42-43 SKILL.md:43-49 SKILL.md:49-51 SKILL.md:51-64 SKILL.md:64-72 SKILL.md:72-78 SKILL.md:78-80 SKILL.md:80-88 SKILL.md:88-97 SKILL.md:97-103 SKILL.md:103-105 SKILL.md:105-116 SKILL.md:116-118 SKILL.md:118-121 SKILL.md:121-127 SKILL.md:127-131 SKILL.md:131-133 SKILL.md:133-135 SKILL.md:135-138 SKILL.md:138-143 SKILL.md:143-146 SKILL.md:146-148 SKILL.md:148-150 SKILL.md:150 SKILL.md:156-158 SKILL.md:158-185 SKILL.md:185-186 SKILL.md:186-187 SKILL.md:187-188 SKILL.md:188-189 SKILL.md:189-190 SKILL.md:190-191 SKILL.md:191-199 SKILL.md:199-222 SKILL.md:222-228 SKILL.md:228-238 SKILL.md:238-244 SKILL.md:244-256 SKILL.md:256-262 SKILL.md:262-286 SKILL.md:286-292 SKILL.md:292-307 SKILL.md:307-331 SKILL.md:331-333 SKILL.md:333-341
📁 文件系统访问 (10)
SKILL.md:379 SKILL.md:28 SKILL.md:384 SKILL.md:3 SKILL.md:28 SKILL.md:384 SKILL.md:28 SKILL.md:218 SKILL.md:306 SKILL.md:384

检测到的模式

Overly permissive chmod×2
审计者: codex 查看审计历史 →
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/brownfinesecurity-chipsec/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/brownfinesecurity-chipsec/security.svg)](https://skillstore.io/skills/brownfinesecurity-chipsec?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/brownfinesecurity-chipsec?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/brownfinesecurity-chipsec/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/brownfinesecurity-chipsec.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

BrownFineSecurity. (2026). chipsec security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/brownfinesecurity-chipsec/audits/9

BibTeX 引用

@techreport{brownfinesecurity-brownfinesecurity-chipsec-2026, author = {BrownFineSecurity}, title = {chipsec security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/brownfinesecurity-chipsec/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "chipsec security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "BrownFineSecurity" date-released: "2026-07-23" url: "https://skillstore.io/skills/brownfinesecurity-chipsec/audits/9" identifiers: - type: other value: "skillstore:brownfinesecurity-chipsec:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
55
架构
85
可维护性
87
内容
73
社区
78
规范符合性

你能构建什么

审查固件转储

运行离线 CHIPSEC 工作流，对一个固件映像进行扫描、解码、清单生成和文档记录。

比较固件更新

在更新前后创建清单，然后识别已更改的 EFI 模块和哈希。

支持事件响应

根据已知 CHIPSEC 签名和可信基线检查可疑固件映像。

试试这些提示

开始基础固件扫描 
Analyze this firmware dump with the chipsec skill. Explain each step before running commands and save the results in an organized folder.
创建 EFI 清单 
Generate an EFI executable inventory for this firmware image. Summarize module names, hashes, and any entries that need follow-up.
比较两个固件映像 
Compare these two firmware dumps with CHIPSEC inventory checks. Highlight changed, added, or removed EFI modules and explain the security impact.
调查可疑固件转储 
Perform an offline CHIPSEC incident response review. Run known threat checks, decode structure, inspect NVRAM output, and produce a prioritized findings report.

最佳实践

  • 仅分析你拥有或已获得明确授权审查的固件。
  • 保持原始固件文件不变，并将分析输出写入单独目录。
  • 将 CHIPSEC 匹配项视为线索，需要结合哈希、GUID 和供应商上下文进行验证。

避免

  • 不要通过此离线工作流运行实时系统 CHIPSEC 模块。
  • 除非你了解安全影响，否则不要进行系统范围的权限更改。
  • 不要假定 blocklist 扫描无结果就意味着固件是安全的。

常见问题

此技能需要 root 访问权限吗？
预期工作流使用离线固件文件，不需要内核驱动访问。源内容中的一些设置指导仍需要更安全的表述。
涵盖哪些固件格式？
此技能涵盖 BIN、ROM、FD、CAP、SCAP、FV 和完整闪存转储文件。
它能检测所有固件恶意软件吗？
不能。它可以检查已知 CHIPSEC 签名，但未知植入需要更深入的逆向工程和外部验证。
它可以比较固件版本吗？
可以。它指导生成和比较清单，以便审查已更改的 EFI 模块。
它能替代 UEFITool 或 binwalk 吗？
不能。它可以通过添加 CHIPSEC 专用扫描、清单和结果解读来补充这些工具。
这适合用于生产设备证明吗？
不能。它支持固件转储分析，但生产环境证明需要受控流程和可信测量。

开发者详情

许可证

MIT

Skillstore 修订

r2

版本提示

作者未声明版本。

仓库

https://github.com/BrownFineSecurity/iothackbot/tree/master/skills/chipsec

引用

a39a91716eadede5f4cdefd78178fed4e837a128

维护新鲜度

2026/7/29

使用量

7 次下载 · 374 次浏览

文件结构

📄 SKILL.md