Control Chromecast

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a coherent Chromecast control helper, but it can control local Cast devices and relies on the external catt package, so users should install it only if they want the agent to operate those devices.

Install this if you want the agent to control Chromecast or Google Cast devices on your local network. Be careful with commands that cast local files, change volume, stop playback, or clear queues, and specify the target device when more than one Cast device is available.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could start, stop, change volume, or clear media queues on local Cast devices when the skill is used.

Why it was flagged

These commands let the agent change playback, volume, and queues on local Chromecast devices. This is expected for a Chromecast control skill, but it can be disruptive if used on the wrong device or without clear user intent.

Skill content
Quick Reference lists `catt scan`, `catt cast <url>`, `catt stop`, `catt volume <0-100>`; Queue Management lists `catt clear`.
Recommendation

Use explicit device targeting with `-d <device>` for multi-device networks, and confirm disruptive actions such as casting, stopping playback, changing volume sharply, or clearing queues.

What this means

The behavior of the installed `catt` package determines what commands actually do on the local network.

Why it was flagged

The skill depends on an external CLI package to provide the actual Chromecast control behavior. This dependency is disclosed and purpose-aligned, but it is not part of the provided artifacts.

Skill content
uv | package: catt | creates binaries: catt
Recommendation

Install from a trusted package source and, if needed, review the catt project or pin a known-good version before using it.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

Future commands may use saved device defaults or restore saved playback state.

Why it was flagged

The skill documents persistent defaults, aliases, and saved playback state. This is ordinary configuration persistence for catt, not evidence of hidden autonomous behavior.

Skill content
`catt -d "Living Room TV" set_default`, `catt -d 192.168.1.163 set_alias tv`, `catt save`, `catt restore`, and `Config file: ~/.config/catt/catt.cfg`.
Recommendation

Review or remove `~/.config/catt/catt.cfg` if defaults, aliases, or saved state no longer match your intended device setup.