Zonefoundry Local Sonos

• Analyzed: May 9, 2026, 8:03 AM
• Findings: 1
• Version: 1.5.9
• Hash: d92197c0d9a22182a12794a728ee2d8c1481316d3dbb92418ddfb6d4ef0ab3c9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to high-risk execution patterns that grant the `zf` binary significant control over the agent. Specifically, `SKILL.md` and `agents/openai.yaml` contain 'Hard rules' instructing the agent to 'Always obey' and immediately execute any command returned in the binary's JSON output (`nextCommand` and `nextAction`). This, combined with instructions for the binary to update itself (`zf update self`) and provide its own capability references to the agent (`zf skill show`), creates a self-modifying execution loop that could be leveraged for Remote Code Execution (RCE) if the binary or its source repository (github.com/kisssam6886/zonefoundry) is compromised.