Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add 0dayInc/pwn --skill adalm_plutogit clone --depth 1 https://github.com/0dayInc/pwnWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/0dayinc/pwn/adalm_pluto)<a href="https://agentmods.dev/skills/0dayinc/pwn/adalm_pluto"><img src="https://agentmods.dev/badge/skills/0dayinc/pwn/adalm_pluto/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/0dayinc/pwn/adalm_pluto"><img src="https://agentmods.dev/badge/skills/0dayinc/pwn/adalm_pluto.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00032 | $0.00515 |
| Opus 5.5 | $0.00013 | $0.00206 |
| Sonnet 5.5 | $0.00006 | $0.00103 |
| Haiku 4.5 | $0.00003 | $0.00052 |
Grade A, and why
pwn-ffi-adalmpluto-ad9361 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
PWN::FFI::AdalmPluto::Ad9361
Thin libiio binding specialised for the ADALM-PLUTO (AD9363). Control-plane + blocking RX of interleaved CS16 I/Q so PWN::SDR::Decoder::* can pull MHz-rate complex samples without GQRX's 48 kHz audio tap and without shelling out to iio_*. libad9361 is used only for optional bb_rate helpers when present. If libiio is missing .available? is false and callers fall back to RTLSdr / HackRF / SoapySDR / pure-Ruby detector paths. Default URI tries USB (local) first: "ip:192.168.2.1" is the stock Ethernet/USB-gadget address of an unconfigured Pluto.
When to use
Call PWN::FFI::AdalmPluto::Ad9361 from pwn_eval when the task needs this module.
Do not reimplement it in shell.
Methodologies
Generated from pwn/ffi/adalm_pluto.rb. Prefer the public class methods below.
Class methods take (opts = {}) and read opts.
How to call
PWN::FFI::AdalmPluto::Ad9361.help
PWN::FFI::AdalmPluto::Ad9361.available(opts)
Public methods
availableinfolist_urisopenclosedevice_infoconfigurestart_rxread_syncstop_rxcaptureauthorshelpad9361_set_bb_rateload_error
Source
pwn/ffi/adalm_pluto.rb
Verification
PWN::FFI::AdalmPluto::Ad9361.respond_to?(:available) after the
module is loaded. Read the source for parameter names.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 60 lines · 32 tokens per session scan A 76d1e7fa6986
pwn-ffi-adalmpluto-ad9361 is a skill published in the GitHub repository 0dayInc/pwn (86 stars, last pushed yesterday), licensed MIT. It adds 32 tokens to every session and 515 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
Shortcuts
Bridges macOS Shortcuts.app into LifeOS: build a Shortcut once via computer use, then call it as a CLI to reach Apple-only capabilities like HomeKit. USE WHEN build a shortcut, create a shortcut, macOS shortcut, shortcuts app, run a shortcut, automate a native mac task, HomeKit automation that needs a shortcut…
scienceworld-circuit-builder
This skill constructs a simple electrical circuit by connecting components like batteries, wires, and light bulbs. Use when the agent needs to test electrical conductivity or create a functional circuit for an experiment. The input is a set of available components, and the output is a fully connected circuit ready for…
scienceworld-circuit-connector
This skill connects two electrical components (e.g., wires, batteries, devices) by their terminals to build or modify a circuit. Use when constructing electrical setups for testing, such as conductivity checks or device activation. The input includes two component identifiers and their connection points, and the…
flutter-webview-production-engineering
Design, implement, review, secure, debug, test, optimize, and migrate production Flutter embedded-browser features using webviewflutter. Use this skill whenever work involves WebViewController/WebViewWidget lifecycle, NavigationDelegate, domain allowlists, JavaScript channels, cookies/session handoff, OAuth browser…
hardware
Read and control I2C and SPI peripherals on Sipeed boards (LicheeRV Nano, MaixCAM, NanoKVM).
ros2-architect
ROS2 standards across Jazzy/Kilted/Lyrical — colcon + amentcmake/amentpython layout, lifecycle nodes, explicit QoS, services/actions, parameters, Python launch DSL. Cross-platform dev env via Pixi + RoboStack. C++ (rclcpp) and Python (rclpy) equal first-class. Use when scaffolding or reviewing a ROS2 workspace.