Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add iot-forge/m5stack-skills/plugin install coreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/iot-forge/m5stack-skills/project-bootstrap)<a href="https://agentmods.dev/skills/iot-forge/m5stack-skills/project-bootstrap"><img src="https://agentmods.dev/badge/skills/iot-forge/m5stack-skills/project-bootstrap/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/iot-forge/m5stack-skills/project-bootstrap"><img src="https://agentmods.dev/badge/skills/iot-forge/m5stack-skills/project-bootstrap.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00126 | $0.00449 |
| Opus 5.5 | $0.00050 | $0.00180 |
| Sonnet 5.5 | $0.00025 | $0.00090 |
| Haiku 4.5 | $0.00013 | $0.00045 |
Grade A, and why
project-bootstrap scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Core2 project bootstrap
When the user is starting a new Core2 firmware project and has already
picked Arduino or PlatformIO as the framework, run the bundled generator
instead of writing platformio.ini or the sketch/main.cpp skeleton by
hand — the boilerplate never changes, so there is no reason to regenerate
it token by token.
Ask the user for a project/sketch name if they haven't given one (default
core2_project if they don't care). Then, in the user's project directory,
run:
"${CLAUDE_PLUGIN_ROOT}"/scripts/bootstrap.py --board core2 --framework arduino --name <project_name>
or, for PlatformIO:
"${CLAUDE_PLUGIN_ROOT}"/scripts/bootstrap.py --board core2 --framework platformio --name <project_name>
Pass --framework platformio --name "" to scaffold platformio.ini and
src/main.cpp straight into the current directory instead of a named
subfolder.
Report the files the script printed as created. If it exits non-zero
because a file already exists, tell the user and ask whether to pass
--force to overwrite, rather than writing the file yourself.
This generates the recommended M5Unified skeleton only. For the legacy M5Core2 library skeleton, ESP-IDF, UIFlow, or anything past the initial scaffold (pinouts, power management, audio, etc.), use the core2 skill's own reference material instead.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 40 lines · 126 tokens per session scan A 0b2fd82ff21d
project-bootstrap is a skill published in the GitHub repository iot-forge/m5stack-skills (5 stars, last pushed 7d ago), licensed MIT. It adds 126 tokens to every session and 449 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-11.
Other skills, from other repositories
sticky-device
Hardware facts, ESP-IDF firmware patterns, ePaper/touch APIs, and Playground publishing rules for the Seeed Studio reTerminal Sticky (ESP32-S3, 3.97" 800x480 e-ink). Use when working on reTerminal Sticky or "Sticky" firmware, apps, pin assignments, display refresh, touch gestures, deep sleep, ESPHome/Home Assistant…
embedded-engineer
(oh-my-embedded) Senior embedded systems engineer. ESP32/STM32, FreeRTOS, RF design, power management, peripheral interfaces. Use for any embedded/firmware/electronics/hardware question.
firmware-debugger
(oh-my-embedded) Firmware debugging via GDB and serial monitor. Breakpoints, memory inspection, stack traces, JTAG/SWD. Requires debug probe.
component-sourcer
(oh-my-embedded) Electronic component search, BOM optimization, alternative parts finder. Searches JLCPCB/LCSC, Nexar/Octopart catalogs.
embedded-review
(oh-my-embedded) Embedded firmware code review. Memory safety, ISR correctness, RTOS pitfalls, peripheral interfaces, C/C++ UB traps. Severity P0-P3.
pcb-designer
(oh-my-embedded) PCB design with KiCad. Schematic capture, component placement, trace routing, DRC, Gerber export, JLCPCB BOM. Requires KiCad installed.