Dht11 Temp
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it says—read a DHT11 temperature and humidity sensor—but users should notice that it uses sudo/GPIO access and includes an optional cron example.
This looks like a small, purpose-aligned Raspberry Pi sensor skill. Before installing, verify you are comfortable running GPIO code with sudo, install RPi.GPIO from a trusted source, and only add the cron entry if you intentionally want scheduled background readings.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A script run with sudo can affect the local system, although the provided code is limited to GPIO sensor access.
The skill discloses that sudo is required, which means the sensor-reading script may be run with elevated local privileges.
metadata: {"openclaw": {"emoji": "🌡️", "requires": {"bins": ["python3", "sudo", "RPi.GPIO"]}}}Only run this on the intended Raspberry Pi hardware, and consider using least-privilege GPIO permissions instead of sudo if your system supports it.
If added to cron, the script would continue running on a schedule and append readings or errors to a log file.
The documentation includes an optional crontab entry that would make the script run periodically with sudo if the user manually installs it.
*/30 * * * * sudo python3 ~/scripts/dht/main.py >> /var/log/dht.log 2>&1
Add the cron entry only if you want ongoing monitoring, and keep track of how to remove or edit the scheduled job.
Installing dependencies from package repositories can introduce supply-chain risk if the package source or version is not controlled.
The skill instructs users to install an unpinned external Python dependency; this is expected for GPIO access but still depends on the package source resolved by pip.
pip3 install RPi.GPIO
Install RPi.GPIO from a trusted source and, for repeatable deployments, pin or verify the package version.