Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ShenShan123/r2g-skills --skill eda-installgit clone --depth 1 https://github.com/ShenShan123/r2g-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/shenshan123/r2g-skills/eda-install)<a href="https://agentmods.dev/skills/shenshan123/r2g-skills/eda-install"><img src="https://agentmods.dev/badge/skills/shenshan123/r2g-skills/eda-install/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/shenshan123/r2g-skills/eda-install"><img src="https://agentmods.dev/badge/skills/shenshan123/r2g-skills/eda-install.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Privilege Escalation · line 3 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 18 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 74 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 76 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 79 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Privilege Escalation · line 115 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00179 | $0.02308 |
| Opus 5 | $0.00089 | $0.01154 |
| Sonnet 5 | $0.00036 | $0.00462 |
| Haiku 4.5 | $0.00018 | $0.00231 |
Grade B, and why
eda-install scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
description: Detect a machine's environment and install + verify the open-source EDA toolchain that the signoff-loop and def-graph skills need — OpenROAD-flow-scripts (openroad/yosys), iverilog, KLayout, Magic, Netgen, O Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
optional_bins: [conda, git, curl] How it starts
The opening of the file, as written. The whole thing — 117 lines — stays where its author put it; the contents beside it link to each section on GitHub.
eda-install Skill
Provision the open-source EDA toolchain, then get out of the way. This is the setup companion to
the two working skills: signoff-loop (RTL→GDS + signoff) and def-graph (graph datasets). It
answers one question — "are the tools this machine needs present, and if not, how do I get them
without breaking anything?" — and acts on the answer.
The one command
bash r2g-skills/eda-install/bootstrap.sh --dry-run # detect + plan, install NOTHING
bash r2g-skills/eda-install/bootstrap.sh # install missing tiers + pin env.local.sh + verify
bash r2g-skills/bootstrap.sh is a shim to the same script.
What it does — detect → plan → install → pin → verify
- Detect (
scripts/setup/detect_env.sh) — a cleanKEY=VALUEsnapshot of the machine: OS + package manager,HAVE_SUDO,HAVE_CONDA, a big writable volume (≥15 GB, preferring/proj), plus every tool + PDK the sharedscripts/flow/_env.shresolver already discovers, and a torch-capable python. Absence is data, never an error. - Plan —
bootstrap.shprints a per-tier table (core / frontend / sky130 / klayout / pdk / graph), eachOK/MISS(required, absent) /OPT(optional, installable), with the exact action it would take. The install channel is chosen byHAVE_SUDO(see below). - Install — each tier is
scripts/setup/install_<tier>.sh;bootstrap.shdispatches to one the moment it exists (and until then prints the command it would run). Theplatform_rulestier is in the default plan (2026-07-20, round-2 pilot P0-3 — a stock nangate45 checkout has no LVS deck and an unusable 0-area antenna diode, so strict signoff is impossible while every tool reads green): the plan probesplatform_capability.py --platform nangate45 --strictand shows OK/OPT; being ORFS-mutating it still installs only when named (--tiers platform_rules), materializing the repo's bundled nangate45 DRC/LVS/antenna rule decks into the ORFS checkout (install_platform_rules.sh, best-effort, HINTs when the repotools/installers are unreachable — EXCEPT the sky130hs.lytlefdef repair, a REQUIRED postcondition verified bypatch_sky130hs_lyt.py --checkplus thesky130hs_gds_canary.pyDEF→GDS geometry canary; a failed repair FAILS setup, RMD-P0-04). Platforms SELECTED as strict (--strict-platforms nangate45,sky130hd,sky130hson bootstrap.sh, orR2G_STRICT_PLATFORMS/--platformson the installer) are FAIL-CLOSED end-to-end (RMD2-P1-01, failure-patterns #55): a missing/failing rule installer, an unverifiable canary, or a failed post-installplatform_capability.py --strictprobe fails setup, and the capability verdict + collateral sha256 digests are persisted toeda-install/references/install_manifest.json. Selecting strict platforms also makes the platform_rules tier REQUIRED in the plan.check_env.shprints the same per-platform capability table;check_env.sh --platform <p>(orR2G_TARGET_PLATFORM) makes the NAMED campaign platform's strict readiness REQUIRED and fail-closed (RMD-P0-03);R2G_STRICT_PLATFORMS="nangate45"does the same for a standing list. - Pin (
scripts/setup/write_env_local.sh) — writesreferences/env.local.shinto bothsignoff-loopanddef-graphfrom the resolved paths, so the flow skills find a conda //projtoolchain with no manual edit. It pins only what autodetect would miss (e.g. omits openroad/yosys already under$ORFS_ROOT/tools/install) and addsR2G_GRAPH_PYTHON. - Verify — runs
scripts/flow/check_env.sh(ORFS + required + optional + graph stage + platforms) and reports the same table the README documents.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- bootstrap.sh 18 KB runs code
- references/setup.md 3.6 KB
- scripts/flow/_env.sh 8.9 KB runs code
- scripts/flow/check_env.sh 5.3 KB runs code
- scripts/setup/_setup_lib.sh 4.4 KB runs code
- scripts/setup/detect_env.sh 4.8 KB runs code
- scripts/setup/install_core.sh 2.0 KB runs code
- scripts/setup/install_frontend.sh 786 B runs code
- scripts/setup/install_graph.sh 1.4 KB runs code
- scripts/setup/install_klayout.sh 2.1 KB runs code
- scripts/setup/install_pdk.sh 1.0 KB runs code
- scripts/setup/install_platform_rules.sh 9.6 KB runs code
- scripts/setup/install_sky130.sh 732 B runs code
- scripts/setup/resolve_pins.sh 6.6 KB runs code
- scripts/setup/write_env_local.sh 7.0 KB runs code
- tests/test_bootstrap.py 15 KB runs code
- tests/test_install_tiers.py 6.4 KB runs code
- tests/test_platform_rules_failclosed.py 8.8 KB runs code
- tests/test_repeat_bootstrap_pins.py 8.6 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 117 lines · 179 tokens per session scan B 6e89c6db333a
eda-install is a skill published in the GitHub repository ShenShan123/r2g-skills (42 stars, last pushed today), licensed MIT. It adds 179 tokens to every session and 2,308 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
gke-compute-classes
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…
jetson-diagnostic
Read-only Jetson health snapshot for identity, memory, GPU, thermal, power, storage, services, and top processes.
doca-socket-relay
Use this skill when the operator is driving the DOCA Socket Relay to bridge a socket-oriented host application onto a BlueField DPU peer without rewriting it — picking the deployment shape (in-process, sidecar, or BlueField service container), configuring the host-side socket and the DPU-side forwarding endpoint…
offensive-z-wave
Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting…
hsb-flash
Flash the FPGA on an HSB board connected to an NVIDIA devkit. Supports HSB Lattice boards (FPGA versions 2407, 2412, 2507, 2510) and Leopard Imaging VB1940 "all-in-one" cameras (FPGA versions 2507, 2510). Uses release-specific YAML manifests and board-type-specific program commands. Lattice and VB1940 commands must…
jetson-validate-image
Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.