Security audit
sonos
Security checks across malware telemetry and agentic risk
Overview
The skill transparently documents and installs a Sonos command-line tool for user-directed speaker control, with no evidence of hidden or unrelated behavior.
Install this only if you want Codex or another agent to control Sonos devices on your local network. Review prompts before allowing volume, grouping, queue clearing, or Spotify-related actions, and consider pinning the Go module version if reproducible installs matter.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
50/50 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.