ArduPilot Drone Control

WarnAudited by ClawScan on May 10, 2026.

Overview

This skill is openly for drone control, but it includes force-arming and takeoff commands without clear human-confirmation or safety boundaries.

Only use this skill if you intentionally want an agent to help control an ArduPilot vehicle. Prefer simulator use first, do not allow autonomous arming or takeoff without explicit confirmation, verify GPS/battery/location/geofence conditions, and ensure you have an emergency stop or manual override available.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent following this skill could arm and launch a connected drone; mistakes or unintended invocation could create real-world safety, property, or regulatory risks.

Why it was flagged

The skill instructs immediate force-arming and takeoff of a connected ArduPilot vehicle. The artifact does not pair these high-impact commands with explicit human confirmation, simulation-only limits, geofencing, emergency-stop handling, or bounded approval for each physical action.

Skill content
起飞必须连续发送命令,不要等待! ... master.mav.command_long_send(1, 1, 400, 0, 1, 21196, 0, 0, 0, 0, 0)  # ARM (force=21196) ... TAKEOFF 5m
Recommendation

Require explicit user approval before any ARM, TAKEOFF, LAND, or movement command; default to simulator/test mode; add preflight checks, geofence/altitude limits, emergency stop guidance, and clear confirmation of the target vehicle and command parameters.

What this means

The user may install a third-party Python package whose exact version and provenance are not fixed by this skill.

Why it was flagged

Installing pymavlink is expected for MAVLink drone control, but the dependency is documented as an unpinned pip install and there is no install spec in the artifacts.

Skill content
## 依赖

```bash
pip install pymavlink
```
Recommendation

Install pymavlink from a trusted source, preferably in a virtual environment, and consider pinning and verifying the package version before use.