RoomSound
PassAudited by ClawScan on May 1, 2026.
Overview
RoomSound is a coherent audio-control skill, but it can install audio tools, change Bluetooth/audio outputs, and remember speaker aliases for later use.
Before installing, be comfortable with the agent installing local audio/Bluetooth tools, changing active speakers, writing yt-dlp configuration, and remembering speaker aliases. The artifacts do not show credential use, hidden endpoints, exfiltration, or destructive behavior.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may ask to install or initialize system audio tools before playback works.
The skill may run local package-installation commands during setup. This is expected for an audio/Bluetooth playback skill, but it changes the user's system packages.
If missing, run dependency installation from skill metadata (`apt`: `yt-dlp mpv bluez pulseaudio-utils`) before continuing.
Only approve package installation if you trust the skill and want these audio/Bluetooth tools installed on the device.
A speaker-switch request could disconnect existing Bluetooth audio devices or change where system audio plays.
The skill can disconnect current Bluetooth devices and change the active audio output. That is aligned with speaker switching, but it can interrupt audio or other connected devices.
`bluetoothctl disconnect <CONNECTED_MAC>` for each connected device not equal to target ... `bluetoothctl connect <TARGET_MAC>` ... `wpctl set-default <SINK_ID>` or `pactl set-default-sink <SINK_NAME>`
Confirm speaker-switching actions, especially on shared machines or when other Bluetooth devices are in use.
Speaker names, Bluetooth MAC addresses, preferences, or recent-context cues may be remembered and reused for future playback decisions.
The skill stores device identifiers for reuse and may use prior context or preferences when forming YouTube searches. This is useful for personalized playback but creates persistent local context.
Persist alias-to-MAC mapping in agent memory/config ... Build candidate queries from memory + context.
Use non-sensitive speaker aliases, avoid private details in music requests, and clear the stored aliases/context if you no longer want them reused.