Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add znlgis/opengis-skills --skill ke3036-keyes-picogit clone --depth 1 https://github.com/znlgis/opengis-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/znlgis/opengis-skills/ke3036-keyes-pico)<a href="https://agentmods.dev/skills/znlgis/opengis-skills/ke3036-keyes-pico"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/ke3036-keyes-pico/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/znlgis/opengis-skills/ke3036-keyes-pico"><img src="https://agentmods.dev/badge/skills/znlgis/opengis-skills/ke3036-keyes-pico.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium analysis-evasion · line 1 Suspicious Unicode normalization or mixed-script contentFix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
- medium Privilege Escalation · line 320 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00084 | $0.03002 |
| Opus 5 | $0.00042 | $0.01501 |
| Sonnet 5 | $0.00017 | $0.00600 |
| Haiku 4.5 | $0.00008 | $0.00300 |
Grade B, and why
ke3036-keyes-pico scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
| 串口在 Linux 需要权限 | `sudo usermod -aG dialout $USER` | How it starts
The opening of the file, as written. The whole thing — 336 lines — stays where its author put it; the contents beside it link to each section on GitHub.
项目地址（资料/示例）： https://github.com/keyeswiki/KE3036-Keyes-Pico-42-1-（Keyes Wiki 镜像仓库；原 keyestudio/ke3036 仓库已下线）
Pico 官方文档： https://www.raspberrypi.com/documentation/microcontrollers/raspberry-pi-pico.html
MicroPython for RP2040： https://docs.micropython.org/en/latest/rp2/quickref.html
许可证： 配套示例多为 MIT / GPL（视具体文件）
概述
KE3036 套件常见组成：
- 主控：Raspberry Pi Pico / Pico W（RP2040，双核 ARM Cortex-M0+，264 KB SRAM，2 MB Flash）
- 外设：板载 LED、按键、蜂鸣器、OLED 0.96"、电位器、光敏、温度等
- 接口：杜邦 / Grove / GPIO 排针
- 配件：传感器扩展包（DHT11、超声波、舵机、显示屏、电机等）
烧录 MicroPython 固件
# 1. 下载固件：
# https://micropython.org/download/RPI_PICO/ → .uf2
# 2. 按住 Pico 上的 BOOTSEL 键插入 USB → 出现 RPI-RP2 磁盘
# 3. 拷贝 .uf2 到该磁盘 → 自动重启进入 MicroPython
工具
pip install thonny # 推荐 IDE
pip install mpremote esptool # 命令行
mpremote connect /dev/ttyACM0 ls
mpremote connect /dev/ttyACM0 cp main.py :main.py
mpremote connect /dev/ttyACM0 run main.py
GPIO 入门
板载 LED 闪烁（Pico GP25）
from machine import Pin
from time import sleep
led = Pin(25, Pin.OUT)
while True:
led.toggle()
sleep(0.5)
Pico W 板载 LED：
from machine import Pin
led = Pin("LED", Pin.OUT)
读取按键
btn = Pin(15, Pin.IN, Pin.PULL_UP)
while True:
if btn.value() == 0: print("pressed")
sleep(0.1)
PWM 蜂鸣器
from machine import PWM, Pin
buz = PWM(Pin(14)); buz.freq(880); buz.duty_u16(20000)
sleep(0.5); buz.deinit()
模拟输入（电位器 / 光敏）
from machine import ADC, Pin
adc = ADC(Pin(26)) # GP26 = ADC0
val = adc.read_u16() # 0..65535
volt = val * 3.3 / 65535
板载温度传感器：
adc = ADC(4)
v = adc.read_u16() * 3.3 / 65535
temp = 27 - (v - 0.706) / 0.001721
I²C 与 OLED
from machine import I2C, Pin
import ssd1306
i2c = I2C(0, sda=Pin(0), scl=Pin(1), freq=400_000)
oled = ssd1306.SSD1306_I2C(128, 64, i2c)
oled.fill(0); oled.text("Hello KE3036", 0, 0); oled.show()
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 718643a5effa
- 2d ago Changed 8d9cbff15603
- 9d ago First seen · 336 lines · 84 tokens per session scan B 56ad52d86187
ke3036-keyes-pico is a skill published in the GitHub repository znlgis/opengis-skills (61 stars, last pushed yesterday), licensed MIT. It adds 84 tokens to every session and 3,002 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
ruview-quickstart
Onboarding and first-run for RuView (WiFi-DensePose) — Docker demo with simulated data, repo build, and the fastest path to a live sensing dashboard. Use when someone is new to RuView or wants the shortest path to "it works on my machine".
onboard
Zero-to-sensing path picker for RuView (WiFi-DensePose) — pick docker-demo, repo-build, or live-esp32 and run the next concrete step.
amazon-alexa
Integracao completa com Amazon Alexa para criar skills de voz inteligentes, transformar Alexa em assistente com Claude como cerebro (projeto Auri) e integrar com AWS ecosystem (Lambda, DynamoDB, Polly, Transcribe, Lex, Smart Home).
doca-programming-guide
Use this skill when the user is writing their first DOCA app or asking a library-agnostic programming question — picking a shipped sample to copy and modify, wiring the canonical pkg-config doca-{library} + meson build (or FFI from Rust / Go / Python against the public C ABI), walking the cfg-create → init → start →…
iot-camera-recon
Attack cameras via RTSP, ONVIF, Axis config when 554 open.
library-migration-guide
Complete guide for converting Arduino/ESP32 hardware libraries into Aily Blockly compatible format. Covers the full workflow: source analysis, block.json design, generator.js implementation, toolbox.json configuration, bus initialization (Serial/I2C/SPI), board adaptation, and packaging.