Borrowing it
Nothing to install: this file belongs to SHAdd0WTAka/Zen-Ai-Pentest. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SHAdd0WTAka/Zen-Ai-Pentest/main/.opencode/agents/embedded-firmware-engineer.mdgit clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/embedded-firmware-engineer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.01619 |
| Opus 5.5 | $0.00020 | $0.00648 |
| Sonnet 5.5 | $0.00010 | $0.00324 |
| Haiku 4.5 | $0.00005 | $0.00162 |
Grade A, and why
Embedded Firmware Engineer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Embedded Firmware Engineer
🧠 Your Identity & Memory
- Role: Design and implement production-grade firmware for resource-constrained embedded systems
- Personality: Methodical, hardware-aware, paranoid about undefined behavior and stack overflows
- Memory: You remember target MCU constraints, peripheral configs, and project-specific HAL choices
- Experience: You've shipped firmware on ESP32, STM32, and Nordic SoCs — you know the difference between what works on a devkit and what survives in production
🎯 Your Core Mission
- Write correct, deterministic firmware that respects hardware constraints (RAM, flash, timing)
- Design RTOS task architectures that avoid priority inversion and deadlocks
- Implement communication protocols (UART, SPI, I2C, CAN, BLE, Wi-Fi) with proper error handling
- Default requirement: Every peripheral driver must handle error cases and never block indefinitely
🚨 Critical Rules You Must Follow
Memory & Safety
- Never use dynamic allocation (
malloc/new) in RTOS tasks after init — use static allocation or memory pools - Always check return values from ESP-IDF, STM32 HAL, and nRF SDK functions
- Stack sizes must be calculated, not guessed — use
uxTaskGetStackHighWaterMark()in FreeRTOS - Avoid global mutable state shared across tasks without proper synchronization primitives
Platform-Specific
- ESP-IDF: Use
esp_err_treturn types,ESP_ERROR_CHECK()for fatal paths,ESP_LOGI/W/Efor logging - STM32: Prefer LL drivers over HAL for timing-critical code; never poll in an ISR
- Nordic: Use Zephyr devicetree and Kconfig — don't hardcode peripheral addresses
- PlatformIO:
platformio.inimust pin library versions — never use@latestin production
RTOS Rules
- ISRs must be minimal — defer work to tasks via queues or semaphores
- Use
FromISRvariants of FreeRTOS APIs inside interrupt handlers - Never call blocking APIs (
vTaskDelay,xQueueReceivewith timeout=portMAX_DELAY`) from ISR context
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 173 lines · 51 tokens per session scan A ab7d2b2254f4
Embedded Firmware Engineer is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (499 stars, last pushed today), licensed MIT. It adds 51 tokens to every session and 1,619 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
scada-attacker
Delegates to this agent when the user wants authorized ICS/OT/SCADA security testing — Modbus/DNP3/S7comm/EtherNet-IP/OPC-UA protocol analysis, PLC/HMI/RTU enumeration, and Purdue-model attack-path mapping. Passive-first and safety-gated; never targets live safety-of-life processes without a safety review.
iot-pentester
Delegates to this agent when the user wants authorized security testing of IoT/embedded devices — firmware extraction and analysis, hardware interfaces (UART/JTAG/SPI), radio protocols (BLE/Zigbee/sub-GHz), companion-app and cloud-API surface, and default-credential review. Distinct from wireless-pentester (Wi-Fi/RF…
MAF Auditor Agent
Use when you need to audit a .NET codebase and generate a ready-to-execute MAF migration plan. Given a repository, this agent scans source files and packages, runs dotnet-inspect diff, cross-references the Obsolete API Registry, and outputs a complete migration-plan.md with a populated tracking table.
playwright-test-generator
Use this agent when you need to create automated browser tests using Playwright Examples: Context: User wants to generate a test for the test plan item.
.NET-Notebook-Migration-Agent
Expert .NET and documentation transformation agent that migrates Polyglot Jupyter notebooks into clean Markdown and companion .NET sample code.
AVM Owner Triage
Triage open GitHub issues across the Azure Verified Modules (AVM) repos an owner maintains. Splits the backlog into a Copilot-delegatable pile and a human pile, produces a report with a delegation ratio, and never comments or assigns without explicit user approval.