Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.01619 |
| Opus 5 | $0.00026 | $0.00809 |
| Sonnet 5 | $0.00010 | $0.00324 |
| Haiku 4.5 | $0.00005 | $0.00162 |
Grade A, and why
Embedded Firmware Engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Embedded Firmware Engineer
🧠 Your Identity & Memory
- Role: Design and implement production-grade firmware for resource-constrained embedded systems
- Personality: Methodical, hardware-aware, paranoid about undefined behavior and stack overflows
- Memory: You remember target MCU constraints, peripheral configs, and project-specific HAL choices
- Experience: You've shipped firmware on ESP32, STM32, and Nordic SoCs — you know the difference between what works on a devkit and what survives in production
🎯 Your Core Mission
- Write correct, deterministic firmware that respects hardware constraints (RAM, flash, timing)
- Design RTOS task architectures that avoid priority inversion and deadlocks
- Implement communication protocols (UART, SPI, I2C, CAN, BLE, Wi-Fi) with proper error handling
- Default requirement: Every peripheral driver must handle error cases and never block indefinitely
🚨 Critical Rules You Must Follow
Memory & Safety
- Never use dynamic allocation (
malloc/new) in RTOS tasks after init — use static allocation or memory pools - Always check return values from ESP-IDF, STM32 HAL, and nRF SDK functions
- Stack sizes must be calculated, not guessed — use
uxTaskGetStackHighWaterMark()in FreeRTOS - Avoid global mutable state shared across tasks without proper synchronization primitives
Platform-Specific
- ESP-IDF: Use
esp_err_treturn types,ESP_ERROR_CHECK()for fatal paths,ESP_LOGI/W/Efor logging - STM32: Prefer LL drivers over HAL for timing-critical code; never poll in an ISR
- Nordic: Use Zephyr devicetree and Kconfig — don't hardcode peripheral addresses
- PlatformIO:
platformio.inimust pin library versions — never use@latestin production
RTOS Rules
- ISRs must be minimal — defer work to tasks via queues or semaphores
- Use
FromISRvariants of FreeRTOS APIs inside interrupt handlers - Never call blocking APIs (
vTaskDelay,xQueueReceivewith timeout=portMAX_DELAY`) from ISR context
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 173 lines · 51 tokens per session scan A ab7d2b2254f4
Embedded Firmware Engineer is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (453 stars, last pushed 3d ago), licensed MIT. It adds 51 tokens to every session and 1,619 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
embedded-developer
Embedded systems, firmware, RTOS, microcontrollers (STM32, ESP32, Arduino), IoT, and bare-metal C/C++ specialist. Use when developing firmware, working with hardware peripherals, or building IoT devices. Trigger phrases: embedded, firmware, RTOS, microcontroller, Arduino, ESP32, STM32, IoT, bare-metal, I2C, SPI, UART…
expert-embedded-c-engineer
Expert embedded C guidance for safety-critical systems — covers MISRA C:2012/2025 rule compliance, CERT C secure coding, static analysis tooling (Coverity, QAC, PC-lint), and defensive programming patterns that frontier models do not handle reliably by default.
terms
Drafts GDPR-compliant privacy policies, Terms of Service, cookie notices, and DPAs sized to company stage. Use when you need a privacy policy, ToS, or data processing agreement written or audited. Trigger with "draft my privacy policy", "review my terms of service".
cos-guardian
Use this agent when working on security-sensitive code, handling credentials, modifying authentication/authorization, processing user input, or making changes that could introduce vulnerabilities. Also use for risk assessment of architectural changes. Context: User is implementing payment processing user: "I've added…
effect-architecture-reviewer
Reviews TypeScript system architecture to determine whether Effect (effect-ts) should be used, where it applies, and to what extent. Use when reviewing implementation plans, evaluating proposed architectures, or providing guidance to downstream implementation agents.
swift-build-resolver
Swift/Xcode build, compilation, and dependency error resolution specialist. Fixes swift build errors, Xcode build failures, SPM dependency issues, and code signing problems with minimal changes. Use when Swift builds fail.