Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add rcarmo/piclaw-addons --skill linkr-firmware-navigationgit clone --depth 1 https://github.com/rcarmo/piclaw-addonsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/rcarmo/piclaw-addons/linkr-firmware-navigation)<a href="https://agentmods.dev/skills/rcarmo/piclaw-addons/linkr-firmware-navigation"><img src="https://agentmods.dev/badge/skills/rcarmo/piclaw-addons/linkr-firmware-navigation/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/rcarmo/piclaw-addons/linkr-firmware-navigation"><img src="https://agentmods.dev/badge/skills/rcarmo/piclaw-addons/linkr-firmware-navigation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.00485 |
| Opus 5.5 | $0.00018 | $0.00194 |
| Sonnet 5.5 | $0.00009 | $0.00097 |
| Haiku 4.5 | $0.00004 | $0.00049 |
Grade A, and why
linkr-firmware-navigation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Linkr firmware navigation
Use this skill only after a firmware or boot-management screen is visibly open.
Firmware is not portable UI. Every step must be justified by what is visible on the current screen.
Workflow
- Capture
snapshotand identify:- screen title;
- highlighted item;
- visible navigation legend;
- visible current values;
- warning banners or password prompts.
- State what you believe the current menu is and why.
- Choose one menu transition or one value change only.
- Preview the needed HID action using the exact implemented fields.
- Re-run with
execute:true. - Capture a fresh
snapshotand verify the transition actually occurred.
Navigation principles
- Use the actual visible legend if present.
- Do not assume
F10,Escape, or mouse support are portable. - Do not assume tab labels imply keyboard focus order.
- Do not use fixed coordinates unless the UI visibly shows mouse support and the captured geometry is clear.
- Treat Save, Apply, Discard, and Exit as separate semantics.
Change ledger
Before changing any setting, record:
- menu path;
- current value;
- intended new value;
- reason for the change.
After the change, capture the observed new value and whether it still requires Save or Apply.
Explicitly protected settings
Do not casually alter:
- Secure Boot;
- TPM or firmware security state;
- storage controller mode;
- virtualization security features;
- firmware passwords.
These require explicit scope and, where relevant, operator participation.
Password and credential handling
If firmware asks for a password:
- do not attempt bypasses;
- do not guess vendor defaults;
- obtain operator-supplied credentials through an agreed secure handoff, or hand control to the operator.
Current limitations
There is no built-in semantic firmware detector or durable resume. If a screen transition is missed, observe again and correct one step at a time.
What counts as success
Success is not “a key was sent.” Success is a verified visual transition or a verified settings change supported by a new snapshot.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 73 lines · 44 tokens per session scan A 227658bfba24
linkr-firmware-navigation is a skill published in the GitHub repository rcarmo/piclaw-addons (23 stars, last pushed yesterday), licensed MIT. It adds 44 tokens to every session and 485 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-13.
Other skills, from other repositories
profinet
PROFINET (L2 EtherType 0x8892 / DCP) attack playbook — DCP Identify-All broadcast enumeration, device fingerprinting, station-name and IP reassignment (breaks IO-controller mapping), flash-LED physical location, factory-reset, RT frame injection/replay for cyclic-IO spoofing. Siemens/EU fieldbus peer of S7Comm…
opentrons-integration
Official Opentrons Protocol API for OT-2 and Flex robots. Use when writing protocols specifically for Opentrons hardware with full access to Protocol API v2 features. Best for production Opentrons protocols, official API compatibility. For multi-vendor automation or broader equipment control use pylabrobot.
pylabrobot
Vendor-agnostic lab automation framework. Use when controlling multiple equipment types (Hamilton, Tecan, Opentrons, plate readers, pumps) or needing unified programming across different vendors. Best for complex workflows, multi-vendor setups, simulation. For Opentrons-only protocols with official API…
ics-overview
Use when the target is an industrial control system or operational technology network running Modbus, BACnet, S7Comm/S7Comm Plus, DNP3, OPC-UA, or any PLC/HMI/SCADA stack. Engagements MUST set RoE flag industrialsafetycritical=true; this catalog gates every write-scope operation behind explicit operator confirmation…
omh-physical-device-readiness
This is an OMH physical-device-readiness workflow skill, projected for Agent Skills hosts (Claude Code, Codex, Cursor, opencode, OpenClaw, pi).
x-smart
SMART disk health monitoring tool. Check disk health, temperature, and attributes using smartctl. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.