arduino-project-builder

Savant verdict: Review advised

Security analysis or source-hub review identified patterns requiring attention.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

9 patterns found

• MCP Least Privilege: Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: file_write.medium · SKILL.md:1 · Without declared permissions the skill's intent is opaque and cannot be validated.
• analysis-evasion: AE4medium · examples/project-environmental-monitor.md:1 · Suspicious Unicode normalization or mixed-script content
• analysis-evasion: AE4medium · examples/project-iot-device.md:1 · Suspicious Unicode normalization or mixed-script content
• Privilege Escalation: sudomedium · examples/project-iot-device.md:284 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
• Privilege Escalation: sudomedium · references/project-iot-device.md:284 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
• Privilege Escalation: sudomedium · examples/project-iot-device.md:287 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
• Privilege Escalation: sudomedium · references/project-iot-device.md:287 · Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
• analysis-evasion: AE4medium · references/project-environmental-monitor.md:1 · Suspicious Unicode normalization or mixed-script content
• analysis-evasion: AE4medium · references/project-iot-device.md:1 · Suspicious Unicode normalization or mixed-script content

Structure

• Ships 1 executable scriptscripts/scaffold_project.py. Review what they do before enabling the skill for agents with tool access.
• No license declaredConfirm you may reuse this skill before importing it into your repository.
• The source hub's security checks flagged this skillSocket: warn (1 alert: gptAnomaly); Runlayer: warn (15/19 files flagged)

SKILL.md

---
name: arduino-project-builder
description: Build complete Arduino and embedded projects across Arduino IDE, Arduino CLI, PlatformIO, and vendor-specific toolchains. Use when users request an application combining firmware, sensors, actuators, networking, power, or deployment rather than a code snippet. The bundled scaffold targets UNO, ESP32, and Raspberry Pi Pico; use the board profile and document limitations for other targets.
metadata: {triggers: "build Arduino project, scaffold firmware, application, PlatformIO"}
---

# Arduino Project Builder

Assemble complete, working Arduino projects from requirements. This skill combines multiple patterns (sensors, actuators, state machines, logging, communication) into cohesive systems.

## Quick Start

**List available project types:**
```bash
uv run --no-project scripts/scaffold_project.py --list
```

**Create a complete project:**
```bash
uv run --no-project scripts/scaffold_project.py --type environmental --board esp32 --name "WeatherStation"
uv run --no-project scripts/scaffold_project.py --type robot --board uno --output ./my-robot
```

**Interactive mode:**
```bash
uv run --no-project scripts/scaffold_project.py --interactive
```

## Intake And Evidence Boundary

Before assembling a project, read [the shared contract](../../docs/arduino-skill-contract.md)
and fill [the board profile](../../docs/board-support/board-profile-template.md).
Record the exact board, framework, toolchain, versions, pins, memory, power,
protocols, and recovery path. Keep build, upload, hardware, system, and
deployment proof separate; a generated scaffold is not hardware validation.

The scaffold script emits its supported board targets and PlatformIO structure.
For another board or vendor framework, reuse the requirements and architecture
workflow, then provide a toolchain-specific implementation rather than changing
the script's claimed support.

## Resources

- **examples/** - Complete project examples (environmental monitor, robot controller, IoT device)
- **scripts/scaffold_project.py** - CLI tool for project scaffolding (config.h, main.ino, platformio.ini, README)
- **assets/workflow.mmd** - Mermaid diagram of project assembly workflow

## Supported Project Types

### Environmental Monitors
Multi-sensor data loggers (temperature, humidity, light, air quality)

See [Environmental Monitor Example](examples/project-environmental-monitor.md)

### Robot Controllers
Motor control, sensor fusion, obstacle avoidance, state machines

See [Robot Controller Example](examples/project-robot-controller.md)

### IoT Devices
WiFi/MQTT data transmission, cloud integration, remote monitoring

See [IoT Device Example](examples/project-iot-device.md)

### Home Automation
Relay control, scheduled tasks, sensor-triggered actions

### Data Acquisition Systems
High-frequency sampling, SD card logging, real-time visualization

## Project Assembly Workflow

- [ ] **[Requirements Gathering](workflow/step1-requirements-gathering.md)** - Analyze user request and gather project specifications
- [ ] **[Architecture Design](workflow/step2-architecture-design.md)** - Design component connections, data flow, and state machines
- [ ] **[Code Assembly](workflow/step3-code-assembly.md)** - Combine patterns and customize for user hardware
- [ ] **[Testing & Validation](workflow/step4-testing-validation.md)** - Verify compilation, memory usage, and functionality
- [ ] **[Documentation](workflow/step5-documentation.md)** - Create wiring diagrams, usage instructions, and troubleshooting guides

## Quality Standards & Rules

- [ ] **[Quality Standards](rules/quality-standards.md)** - Hardware abstraction, non-blocking code, error handling, and memory safety requirements
- [ ] **[Integration Checklist](rules/integration-checklist.md)** - Pre-delivery verification for sensor validation, timing, and reliability
- [ ] **[Board Considerations](rules/board-considerations.md)** - UNO, ESP32, and RP2040 specific optimizations and constraints

## Project Output Template

- [ ] **[Output Template](templates/project-output-template.md)** - Standardized format for delivering complete Arduino projects

## Resources

- **examples/** - Complete project examples with full implementations
- **scripts/scaffold_project.py** - CLI tool for project scaffolding with config.h, main.ino, platformio.ini, README
- **assets/workflow.mmd** - Mermaid diagram of project assembly workflow
- **workflow/** - Step-by-step project assembly process
- **rules/** - Quality standards and board-specific optimizations
- **templates/** - Project output templates and documentation standards

## Shared Output Contract

Use [the shared Arduino skill contract](../../docs/arduino-skill-contract.md):
state assumptions, required tools and versions, implementation steps,
tests/evidence by proof stage, known limitations, and recovery/security notes.