Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Raspberry Pi setup guide that only installs its helper tool after explicit approval and keeps device validation read-only.
Before installing, confirm you are comfortable with an npm registry check and a global jishubuddy install on your operator computer. Review the displayed version and command, disable JishuBuddy telemetry before launch if desired, and only approve device configuration or storage writes when you have verified the target device and data impact.
The skill promises Raspberry Pi setup and validation but mainly provides guidance plus a permissioned path to query npm and install JishuBuddy on the operator machine. That mismatch can mislead users about what actions will actually occur and introduces undeclared external network access to the npm registry, which is a security-relevant side effect in a skill that otherwise appears advisory.
Referenced artifact was not completely inspected
`<skill-directory>` to the absolute directory containing this `SKILL.md`,
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
| Use when | A Raspberry Pi needs imaging preparation, first-boot setup, or initial connectivity checks. |
| Delivers | A setup checklist and evidence-backed first-boot status, including checks still awaiting confirmation. |
| Requires | Exact board/setup details; a supported operator computer running JishuBuddy for live SSH or serial checks. |
| Does not | Erase storage without approval or treat application installation as validated device setup. |
## Use this skill when
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
| Use when | A Raspberry Pi needs imaging preparation, first-boot setup, or initial connectivity checks. |
| Delivers | A setup checklist and evidence-backed first-boot status, including checks still awaiting confirmation. |
| Requires | Exact board/setup details; a supported operator computer running JishuBuddy for live SSH or serial checks. |
| Does not | Erase storage without approval or treat application installation as validated device setup. |
## Use this skill when
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
devices.
3. Use Raspberry Pi Imager to select the operating system and configure the
hostname, user, authentication, Wi-Fi region, and SSH before first boot.
4. Prefer SSH keys over password authentication. Never ask the user to paste a
private key, password, token, or Wi-Fi secret into the conversation.
5. Use a reliable SD card for initial setup. Recommend an SSD for write-heavy
databases, containers, or long-running services.