kernelcveanalysis

Create, write, list, and pull versioned exploit artifact folders through the kartifact CLI.

Wrap an ordinary C exploit or PoC in kernel_PoCs/common so one source project can build as a Linux or Android static executable, dynamic executable, constructor-loaded shared object, or JNI library with local, listening, or reverse-shell root payloads. Use when creating a common-compatible exploit project, converting a C program with main(), setting up exploit entry and post-escalation payload code, repairing its Makefile or entrypoint integration, or initializing the bundled example project.

Add a Linux or Android kernel exploit primitive to ingots_tools/primitives/src/primitive_data in the exact format consumed by primitives/src/primitives/__init__.py. Use when creating a new primitive entry with metadata.json, PRIMITIVE.md, and primitive.c, or when updating an agent to generate primitives for this repository.

Use the android-kdebug skill when debugging Android apps over ADB. The android-kdebug skill documents using kdebug Frida CLI, the kdebug LLDB CLI, or common adb commands.

Use this skill to launch and manage Android Cuttlefish instances using the cuttle-cli and cuttle-server.

Use the high-level object_db wrapper API to scan kernel objects in Python by loading an ObjectSet and filtering HeapObject entries with helper predicates instead of raw SQL.

Use the `testvm` CLI to pack and unpack initrds, build the default BusyBox initrd, and boot Linux kernels under QEMU on `x86_64`, `arm`, or `aarch64`. Use this when the user asks to run, debug, or explain `testvm` commands.

Use when working on exploit development or vulnerability research and maintaining RUNNING_LOG.md plus milestone checkpoints. Applies before and after code edits, experiments, reliability work, debugging, reproductions, and any session where findings or issues should persist for later agents.

Use the android-kdebug skill when debugging Android apps over ADB. The android-kdebug skill documents using kdebug Frida CLI, the kdebug LLDB CLI, or common adb commands.

Use the high-level object_db wrapper API to scan kernel objects in Python by loading an ObjectSet and filtering HeapObject entries with helper predicates instead of raw SQL.

Use running-log-checkpoints when working on exploit development or vulnerability research and maintaining RUNNING_LOG.md plus milestone checkpoints.

Use this skill to launch and manage Android Cuttlefish instances using the cuttle-cli and cuttle-server.

Summarize Linux kernel exploit primitives into the standard format used by ingots_tools/primitives/. Use when extracting a reusable primitive (like a heap spray, info leak technique, or corruption primitive) from a PoC or exploit description.