hardware-security

Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

Jump to install

Repository: TuYv/ccpm
Last source activity: August 14, 2026 at 19:45
Detected SKILL.md language: Mixed languages
Stars: 1
Forks: 2

Install options

The review-first prompt is selected by default. You can switch to a direct command or download a local copy.

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

A direct command skips the review prompt. Inspect the source before running it.

npx skills add https://github.com/TuYv/ccpm --skill hardware-security

The command stays on one line. Scroll horizontally to inspect it before copying.

Prefer a local copy? Download the files currently available to SkillsMP.

Review the source files

Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.

File Explorer

2 files

SKILL.md

Source instructions · Read-only preview

Back to search Back to installation

ad-account-auditor

Use when auditing a paid ad account for incremental contribution, wasted spend, or measurement integrity before scaling; runs a typed 20-item ROAS profile with verified vetoes and a SHIP/FIX/BLOCK/UNDECIDED gate on own exported data. Not for campaign structure design — use campaign-architect; not for creative production — use ad-creative-builder. 付费广告账户审计/ROAS评分

2026-08-14

ad-creative-builder

Use when the user asks to "write ad copy", "generate RSA headlines", or "build ad creative at volume"; produces ad units — RSA headlines/descriptions, hooks, and an angle matrix — message-matched to the destination landing page. Not for scoring an ad account — use ad-account-auditor; not for the post-click page — use landing-optimizer; not for organic articles — use content-writer. 广告创意/广告文案/RSA标题

2026-08-14

ad-test-designer

Use when the user asks to "design an A/B test", "set up a creative/landing test", "run an incrementality test", or "is this result statistically and practically material?"; produces a hypothesis, variant matrix, sample-size/duration/power plan, and a documented effect/uncertainty read from own exported results. It applies only a precommitted owner-approved action rule; the statistical helper never chooses a business action. Not for producing variants — use ad-creative-builder; not for reading back one shipped change — use paid-measurement-loop. 广告AB测试设计/实验设计/显著性判定/增效测试

2026-08-14

View all from this repository

name	hardware-security
description	Use for authorized hardware and embedded interface security research including UART/JTAG discovery, debug pad triage, secure boot overview, and offline firmware extraction support.

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

NOW: 确认物理接触授权与设备归属
NOW: ESD/电源安全；默认只读探测
NEXT: 联合 firmware-pentest 做镜像分析
ACT: 外壳与调试接口识别 → consoles → 提取

适用场景

UART / JTAG / SWD 调试口发现
启动日志、root shell、引导打断
配合拆机提取 Flash
安全启动/加密 Flash 的可行性评估（非破坏性优先）

工作流

□ 拆解授权设备；拍照标注测试点
□ 万用表找 GND/VCC/TX/RX；逻辑电平 1.8/3.3/5V
□ USB-TTL 只读日志；记录波特率
□ JTAG：枚举 IDCODE；评估是否锁定
□ 提取镜像 → 交接 firmware-pentest / ghidra

工具链

工具	用途
USB-TTL / logic analyzer	UART
J-Link / CMSIS-DAP	调试
bus pirate / flipper（实验室）	多协议
binwalk / flashrom	提取

参考

references/debug-interface-triage.md
../firmware-pentest/ ../ot-ics/

路由上下文

上游: MASTER R34
MUST NOT: 未授权拆机/损坏他人设备

任务完成自检

是否记录接口电平与引脚图？
镜像是否哈希保全？
Checklist？

hardware-security

Source facts

Install options

Review the source files

More from this repository

More from this repository

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

适用场景

工作流

工具链

参考

路由上下文

任务完成自检

Hardware / Embedded Interface Security

ACTION REQUIRED（读完后立刻执行）

适用场景

工作流

工具链

参考

路由上下文

任务完成自检