add security note

README.md

@@ -17,6 +17,10 @@ Check out the **[detailed documentation of the Shake&Tune module here](./docs/RE
 |:----------------:|:------------:|:---------------------:|
 | [<img src="./docs/images/belts_example.png">](./docs/macros/belts_tuning.md) | [<img src="./docs/images/axis_example.png">](./docs/macros/axis_tuning.md) | [<img src="./docs/images/vibrations_example.png">](./docs/macros/vibrations_tuning.md) |
 
+  > **Note**:
+  >
+  > Be aware that Shake&Tune uses the [Gcode shell command plugin](https://github.com/dw-0/kiauh/blob/master/docs/gcode_shell_command.md) under the hood to call the Python scripts that generate the graphs. While my scripts should be safe, the Gcode shell command plugin also has great potential for abuse if not used carefully for other purposes, since it opens shell access from Klipper.
+
 ## Installation
 
 Follow these steps to install the Shake&Tune module in your printer: