Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/smk-h/embedded-mcp-toolkit/dev-upgradenpx skills add smk-h/embedded-mcp-toolkit --skill dev-upgradegit clone --depth 1 https://github.com/smk-h/embedded-mcp-toolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/smk-h/embedded-mcp-toolkit/dev-upgrade)<a href="https://agentmods.dev/skills/smk-h/embedded-mcp-toolkit/dev-upgrade"><img src="https://agentmods.dev/badge/skills/smk-h/embedded-mcp-toolkit/dev-upgrade.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00123 | $0.02278 |
| Opus 5 | $0.00062 | $0.01139 |
| Sonnet 5 | $0.00025 | $0.00456 |
| Haiku 4.5 | $0.00012 | $0.00228 |
Grade A, and why
dev-upgrade scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 134 lines — stays where its author put it; the contents beside it link to each section on GitHub.
任务
在 board-ubuntu 上编译内核的同时,在 board-b 上通过串口登录并进入 U-Boot 命令行。编译完成后根据结果决定后续操作:成功则在 U-Boot 下获取信息并重启,失败则保持 U-Boot 状态。
背景
内核编译是耗时操作。利用 code-build 子 agent 在 board-ubuntu 上后台执行编译,与此同时主 agent 在 board-b 串口上并行完成登录、系统信息采集和 U-Boot 进入,从而最大化并行效率。
步骤
并行原理(核心):Claude Code 的
Agent工具默认是阻塞的——会同步等待子 agent 执行完才返回。要实现"编译与串口操作并行",启动 code-build 时必须传run_in_background: true:它调用后立即返回一个task_id,子 agent 在后台编译,主 agent 转身去做串口的活。编译完成后系统自动发 task-notification 通知主 agent,再用TaskOutput取回结果。
第一步:启动编译子 agent(后台异步)
-
单独调用
Agent工具启动 code-build 子 agent,并设run_in_background: true参数:
description:"编译 board-ubuntu 内核"subagent_type:"code-build"run_in_background:trueprompt(将以下内容整体作为 prompt 参数传入):
请登录 board-ubuntu 并在 ~/workspace/Alpha/kernel 目录下执行编译: 1. 使用 ssh_shell_login 登录 board-ubuntu(device: "board-ubuntu") 2. 使用 ssh_build 在 ~/workspace/Alpha/kernel 目录执行命令:./build.sh alpha -a -c - cwd 设为 "~/workspace/Alpha/kernel" - command 设为 "./build.sh alpha -a -c" - maxWait 设为 1800000(30 分钟,内核编译可能很久) 3. 编译结束后,使用 ssh_shell_close 关闭会话 4. 返回编译结果(成功/失败),如果有错误请列出关键错误信息,如果有警告请列出警告摘要调用后
Agent立即返回一个task_id(务必记下它),子 agent 在后台开始编译。不要同步等待结果,继续执行下一步。
第二步:串口登录 board-b(编译在后台进行中)
- 单独调用
serial_shell_login登录 board-bdevice设为"board-b"- 从返回结果中获取
session_id(如serial_1)
第三步:获取系统信息并进入 U-Boot(编译仍在后台进行)
-
获取 board-b 系统信息
- 单独调用
serial_exec,使用步骤 2 的session_id,执行以下命令(delay设为 3000):
echo "=== Hostname ===" && hostname && echo "=== Kernel ===" && uname -a && echo "=== Uptime ===" && uptime && echo "=== Memory ===" && free -h && echo "=== Disk ===" && df -h /- 记录并格式化输出系统信息
- 单独调用
-
进入 U-Boot
- 单独调用
serial_enter_uboot,使用步骤 2 的session_id timeout设为 120(秒)- 确认已进入 U-Boot 命令行(出现
=>或U-Boot>提示符)
- 单独调用
第四步:等待编译结果并处理
- 取回后台编译结果
- 此时主 agent 已完成串口端的所有准备工作(已进入 U-Boot)
- 调用
TaskOutput取回第一步的task_id对应的结果:task_id传入后台任务 id,block设为true阻塞等待编译完成,timeout设为 600000(10 分钟)。 - 若一次
TaskOutput返回任务仍未结束(编译超 10 分钟),再次调用TaskOutput继续等待,直到拿到 code-build 的最终汇报文本。 - 也可在收到该
task_id的 task-notification 通知后,再调用一次TaskOutput(block可为false)取回完整结果。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 134 lines · 123 tokens per session scan A 97ad6c1ec3cf
dev-upgrade is a skill published in the GitHub repository smk-h/embedded-mcp-toolkit (0 stars, last pushed yesterday), licensed MIT. It adds 123 tokens to every session and 2,278 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
integrated-browser
Use this when working on the VS Code integrated browser ("browserView") to understand its architecture and mental model. Covers the embedded Chromium browser, its editor tab, navigation, overlay/layout, sessions, and agent browser tools under src/vs/platform/browserView and src/vs/workbench/contrib/browserView.
gke-compute-classes
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…
jetson-diagnostic
Read-only Jetson health snapshot for identity, memory, GPU, thermal, power, storage, services, and top processes.
doca-socket-relay
Use this skill when the operator is driving the DOCA Socket Relay to bridge a socket-oriented host application onto a BlueField DPU peer without rewriting it — picking the deployment shape (in-process, sidecar, or BlueField service container), configuring the host-side socket and the DPU-side forwarding endpoint…
offensive-z-wave
Z-Wave attack methodology — sniffing with Z-Force / EZ-Wave / RTL-SDR + ZniffMobile, S0 (legacy) network-key derivation flaw and key reuse, S2 (modern) ECDH commissioning analysis, replay/injection on unauthenticated nodes, default-key brute-force on test deployments, and home-automation hub pivots. Use when targeting…
hsb-flash
Flash the FPGA on an HSB board connected to an NVIDIA devkit. Supports HSB Lattice boards (FPGA versions 2407, 2412, 2507, 2510) and Leopard Imaging VB1940 "all-in-one" cameras (FPGA versions 2507, 2510). Uses release-specific YAML manifests and board-type-specific program commands. Lattice and VB1940 commands must…