Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add magnus919/agent-skills --skill esp32-developmentgit clone --depth 1 https://github.com/magnus919/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/magnus919/agent-skills/esp32-development)<a href="https://agentmods.dev/skills/magnus919/agent-skills/esp32-development"><img src="https://agentmods.dev/badge/skills/magnus919/agent-skills/esp32-development/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/magnus919/agent-skills/esp32-development"><img src="https://agentmods.dev/badge/skills/magnus919/agent-skills/esp32-development.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 79 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00117 | $0.02004 |
| Opus 5 | $0.00059 | $0.01002 |
| Sonnet 5 | $0.00023 | $0.00401 |
| Haiku 4.5 | $0.00012 | $0.00200 |
Grade A, and why
esp32-development scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 99 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ESP32 Development
Treat the board, attached circuit, firmware, and host toolchain as one system. An ESP32 task is complete only when the intended behavior is observed at the hardware boundary, not when compilation or flashing alone succeeds.
Operating contract
- Identify the exact board, SoC family, module, flash/PSRAM size, USB transport, power source, and board revision. Do not transfer a pin map between ESP32, S2, S3, C2, C3, C5, C6, H2, or P4 variants.
- Read the board schematic or pinout, the matching SoC/module datasheet, and every attached component datasheet before choosing pins or voltage levels.
- Start with read-only host and USB discovery. Opening a serial monitor may toggle DTR/RTS and reset the target; use a no-reset option when the running state matters.
- Choose one framework based on the product constraint. Reuse its project generator, examples, drivers, build system, flasher, monitor, and debugger before writing wrappers.
- Bring up one layer at a time: power and boot, serial log, one GPIO, one bus, bus scan or loopback, device identity register, raw readings, calibration, then application behavior.
- Before the first flash or hardware mutation, confirm the target port, chip family, image/partition layout, rollback or reflashing path, and electrical safety. Never guess a flash offset.
- Preserve calibration controls for real sensors, clocks, ADCs, PWM devices, and actuators. Physical variation is expected.
Pre-response evidence gate
Complete this gate before drafting a non-trivial plan or recommendation:
- Build a claim ledger for every material positive claim, negative claim, command, and numeric design choice. A URL in
source-index.mdis navigation, not evidence; retrieve the exact chip/current-version page or mark the claimUNKNOWN. - Command help proves syntax only. Record required target state plus reset, DTR/RTS, download-mode, RAM-stub, port, and mutation effects from current documentation. If operational preconditions are unverified, do not present the command as executable.
- Missing hardware artifacts stay missing. Do not replace them with archetypes, examples, or words such as
usually,typical, orsome modules; state what the observed label does not establish. - Do not invent thresholds, margins, intervals, durations, point counts, percentages, or model forms. Derive them from an authoritative source or a measurement criterion; otherwise leave them
UNKNOWN. - Audit the final response against the ledger. Remove or downgrade every material claim that lacks its required evidence.
What ships with it
20 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/evals.json 3.3 KB
- README.md 2.7 KB
- references/connectivity-power-and-ota.md 5.5 KB
- references/debugging-recovery-and-security.md 6.5 KB
- references/decisions-and-preflight.md 4.8 KB
- references/firmware-frameworks.md 6.3 KB
- references/hardware-and-electrical-safety.md 6.0 KB
- references/native-tool-workflows.md 6.2 KB
- references/peripherals-and-buses.md 6.0 KB
- references/sensors-actuators-and-calibration.md 5.2 KB
- references/source-index.md 15 KB
- scripts/esp32-preflight.py 3.1 KB runs code
- templates/component-contract.md 1.6 KB
- templates/esp-idf-main.c 1.3 KB
- templates/esphome-device.yaml 1.0 KB
- templates/esphome-secrets.yaml.example 326 B
- templates/hardware-bringup.md 2.1 KB
- templates/micropython-i2c-scan.py 651 B runs code
- templates/platformio.ini 450 B
- templates/zephyr-esp32.overlay 737 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 99 lines · 117 tokens per session scan A 2261d60e2d59
esp32-development is a skill published in the GitHub repository magnus919/agent-skills (75 stars, last pushed yesterday), licensed MIT. It adds 117 tokens to every session and 2,004 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
rosclaw-embodied
A set of rules for completing robot tasks in ROSClaw, a system for running and checking robot work. It covers approved robot files, acceptance evidence, and separate rules for simulation and real hardware.
modem-tune
Change the reported IMEI on a configured GL.iNet travel router (GL-XE300 or GL-E5800, auto-detected) for work testing. Generates a fresh, never-reused device-class IMEI locally (TAC from per-device config), connects to the modem over SSH, records the outgoing IMEI with a timestamp, applies the change, confirms the…
findmypipe
Locate Apple devices (iPhone, iPad, Mac, AirPods) via iCloud Find My using the findmy-agent CLI. Use this skill when the user asks to find an Apple device, check iPhone/iPad/Mac/AirPods location, locate lost AirPods, "Where's my iPhone", "Dov'è il mio Mac", verify if a device is home vs away, or check if devices are…
ev-car
Query EV car data — battery status, range, charging info.
camsnap
Capture frames or clips from RTSP/ONVIF cameras.
blucli
BluOS CLI (blu) for discovery, playback, grouping, and volume.