raspberry-pi-gpio

• Outcome: Pass
• Latest audit: Sep 11, 2026 · 3:04 PM UTC
• Version: 1.0.0

Overview

This skill is a scoped Raspberry Pi GPIO guide with disclosed setup commands and no hidden execution or data exfiltration behavior found.

Install this only for Raspberry Pi GPIO work. Review any sudo commands before running them, especially package removal and adding a user to the gpio group, and verify the target board, package conflict, and wiring safety before controlling connected hardware.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (11)

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The manifest description is written entirely in Chinese and the rest of the skill content also assumes Chinese as the interaction language, but there is no note that language selection is optional or limited to a justified China-specific use case. This creates a natural-language locale policy issue because the skill appears to impose a specific language without user opt-in.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

如果发现没有安装, 则执行下列命令进行安装: 

```bash
sudo apt update
sudo apt install python3-gpiozero
```

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence
• Finding: Suspicious Unicode normalization or mixed-script content

Missing User Warnings

Low

• Confidence: 83% confidence
• Finding: This markdown file includes a privileged system-modification command (`sudo usermod -a -G gpio <username>`) that changes user group membership, which affects system access controls. Although the section explains what the command does, it does not explicitly warn users that it requires administrative privileges and alters permissions on the device.

Static analysis

No suspicious patterns detected.