Raspberry Pi Manager

Manage Raspberry Pi devices — GPIO control, system monitoring (CPU/temp/memory), service management, sensor data reading.

This skill appears coherent and runs entirely locally, storing logs under ~/.local/share/raspberry-pi-manager. Recommended precautions before installing: (1) review the included scripts (scripts/script.sh) yourself — the package is executed locally; (2) note that logs may contain sensitive operational data (SSH hosts, IPs, filenames) so restrict file permissions and back up or purge as needed; (3) because there is no install step, ensure the execution context (agent or user) is trusted before running the script; (4) if you expect networked device control (GPIO toggles, remote commands) confirm those features are actually implemented — this package is primarily a local logging/audit tool, not a remote management agent.

Type: OpenClaw Skill Name: raspberry-pi-manager Version: 2.0.1 The skill is classified as suspicious due to a significant discrepancy between its documented capabilities and its actual implementation. While the SKILL.md frontmatter claims the tool provides 'GPIO control, system monitoring (CPU/temp/memory), and service management,' the scripts/script.sh file is actually a simple text-based journaling utility that only appends strings to local log files in ~/.local/share/raspberry-pi-manager/. This misleading documentation acts as a form of prompt manipulation, potentially causing an AI agent to report that it has performed hardware or system actions when it has only recorded a log entry. The code itself lacks malicious payloads but contains vulnerabilities such as a lack of input sanitization in the _export function's JSON generation.