Unihiker K10 MicroPython

Use when programming Unihiker K10 board with MicroPython, uploading code, flashing firmware, or accessing K10 MicroPython APIs (screen, sensors, RGB, audio, AI)

This skill appears to do what it claims, but take precautions before running its setup or flash scripts: 1) The setup script runs curl | sh against raw.githubusercontent.com and performs pip installs and may move binaries with sudo — review that installer script and the pip packages before executing. 2) The flashing scripts expect a firmware binary at ${HOME}/.claude/skills/unihiker-k10/firmware/k10-micropython-v0.9.2.bin, but that file is not in the package; verify the firmware source and integrity before flashing. 3) Running these scripts modifies your system (installs tools, writes to ~/.k10, may require sudo); prefer installing arduino-cli/mpremote manually or run setup in an isolated environment (VM/container) if you are unsure. 4) If you decide to proceed, inspect scripts line-by-line for unexpected network calls or remote execution, and avoid running curl | sh blindly. If you want, I can point out the exact lines to inspect or produce a safer, explicit installation checklist you can run manually.

Type: OpenClaw Skill Name: unihiker-k10-micropython Version: 1.0.0 The skill bundle contains scripts for setting up a Unihiker K10 development environment that employ high-risk execution patterns. Specifically, `scripts/setup.sh` uses `curl | sh` to download and execute an external installer for `arduino-cli` and uses `sudo` to move binaries, while `SKILL.md` recommends lowering the PowerShell execution policy. Although these actions are plausibly necessary for the stated purpose of hardware toolchain installation, they represent significant security risks (RCE and system modification) and lack sufficient input validation or integrity checks.