iot-audit

What problem does it solve?

IoT devices often suffer from insecure configurations and auditing challenges. This skill automates asset shape recognition (firmware, source, or mixed) and provides a structured, end-to-end security auditing workflow for embedded devices, enabling proactive risk identification.

Core Features & Use Cases

• Automatic asset shape recognition: detects firmware, source code, or mixed forms to determine the appropriate audit path.
• Unified audit mainline: applies core audit threads (entry points, permissions, state, and persistence) across all device types.
• Type-aware workflows: supports Type A (firmware-only), Type B (source-only), and Type C (firmware+source) audit scenarios, with consistent evidence collection and output.
• Use Case: secure routers, cameras, or smart devices by performing comprehensive security audits and identifying common IoT vulnerabilities.

Quick Start

Invoke IoT-audit on a target device to automatically identify asset forms (firmware, source code, or mixed) and start the unified security audit.