Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →arpitg1304/robotics-security
Security hardening and best practices for robotic systems, covering SROS2 DDS security, network segmentation, secrets management, secure boot, and the physical-cyber safety intersection.
Passed 23 of 24 test cases with the skill, and 16 of 24 without it.
and 6 more in the full report
7 fixed16 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 7 test cases the skill fixed. Same model, same prompt, with and without the skill.
Please provide a shell script that configures firewall filtering using iptables for an autonomous mobile robot computer. The script needs to set default drop policies for incoming traffic, allow internal loopback communication, restrict DDS discovery and user communication traffic to specific local subnet ranges, restrict SSH connections strictly to a dedicated management subnetwork, and block multicast discovery on the wireless interface. Output the complete executable script file.
| Checked | Without skill | With skill |
|---|---|---|
| Specifies UDP port range 7400:7500 for DDS discovery traffic. | Passed | Passed |
| Specifies UDP port range 7500:7700 for DDS user communication traffic. | Missed | Passed |
The instructions your model reads when the skill loads.
Robots are unique: cyber vulnerabilities become physical threats.
NETWORK MIDDLEWARE APPLICATION
┌────────────────┐ ┌────────────────┐ ┌────────────────┐
│ Open DDS ports │───────▶│ Unauthenticated│──────────▶│ Hardcoded │
│ (7400-7500) │ │ /cmd_vel pub │ │ credentials │
│ Unsegmented LAN│ │ No msg signing │ │ Unvalidated cmd│
└────────────────┘ └────────────────┘ └────────────────┘
PHYSICAL FIRMWARE SUPPLY CHAIN
┌────────────────┐ ┌────────────────┐ ┌────────────────┐
│ USB/debug ports│───────▶│ Unsigned │──────────▶│ Compromised │
│ Serial consoles│ │ firmware OTA │ │ ROS packages │
│ Exposed SBCs │ │ No secure boot │ │ Unverified imgs│
└────────────────┘ └────────────────┘ └────────────────┘
| Vector | Impact |
|---|---|
Unauthenticated /cmd_vel | Robot moves unexpectedly — injury/damage |
Sensor spoofing (/scan, /camera/image) | Robot collides, wrong decisions |
| Open DDS multicast discovery | Full topic graph enumeration by passive listener |
| USB/serial physical access | Root shell, firmware flash, data exfiltration |
| Unsigned firmware update | Persistent backdoor in motor controllers |
test cases passed, vs 16 / 24 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.