Skills/ClawHub/raspberry-pi-i2c

raspberry-pi-i2c@0.1.0

CAUTION· static only

Publisher claims: "树莓派 I2C 传感器开发实战指南。覆盖 Raspberry Pi 4B / Zero 的 GPIO 引脚定义、 标准 I2C 与软件 I2C (bit-banging) 的选型与陷阱、gpiod 库使用、BMI270 6轴 IMU 和 MAX30205 温度传感器的驱动开发经验、性能瓶颈分析与常见故障排查。 来..." Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher ntsmzt2009 · publishing for 177 daysInstalls 759Last detonated 24 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 63/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
Privileged sudo commandSKILL.md:135 · Privileged sudo command — agent may execute with elevated privilegessudo apt install libgpiod-devFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:390 · Privileged sudo command — agent may execute with elevated privileges| `No module named 'bmi270'` | sudo 使用 root 的 Python path | 不用 sudo 运行 Flask，或设置 PYTHONPATH |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:362 · Privileged sudo command — agent may execute with elevated privileges| 地址是否正确？ | `sudo i2cdetect -y 1` 扫描总线 |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:78 · Privileged sudo command — agent may execute with elevated privilegessudo raspi-config # -> Interface Options -> I2C -> EnableFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandSKILL.md:383 · Privileged sudo command — agent may execute with elevated privileges| "Device or resource busy" | GPIO 被其他进程占用 | `sudo killall python3` 或释放 gpiod line |Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

Cost to the agent

Instructions loaded
≈3,042 tok
1 file · 2 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

17 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim ntsmzt2009: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim ntsmzt2009Propose a patch to the maintainer