Wayne Sonoscli
v1.0.0Control Sonos speakers (discover/status/play/volume/group).
⭐ 0· 80·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (control Sonos) match the declared binary requirement (sonos) and the runtime instructions. One metadata inconsistency: registry metadata Owner ID differs from the ownerId in _meta.json, which could be a benign packaging error but is worth double-checking before trusting the package source.
Instruction Scope
SKILL.md only instructs running the sonos CLI to discover and control speakers on the local network and optionally using Spotify Web API for searches. It does not ask the agent to read arbitrary files, collect unrelated credentials, or send data to unexpected endpoints. The only network interactions implied are local speaker discovery (SSDP) and optional calls to Spotify/SMAPI when using those features.
Install Mechanism
Install uses 'go' to fetch module github.com/steipete/wayne-sonoscli/cmd/sonos@latest which builds the 'sonos' binary. This is an expected install method for a Go CLI but carries the usual risk of compiling and running third-party code from a GitHub module — verify the module's repository and maintainer before installing.
Credentials
No required environment variables are declared. SKILL.md notes optional SPOTIFY_CLIENT_ID/SECRET only if Spotify search via Web API is used; that is proportional to the stated optional feature.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent system-wide privileges or access to other skills' configs.
Assessment
This skill appears coherent with its stated purpose (it wraps a Sonos CLI). Before installing, verify the upstream Go module (github.com/steipete/wayne-sonoscli) and the homepage, because 'go install' will compile and run third-party code on your machine. Be aware the tool will scan your local network (SSDP) to discover speakers — if you don't want local network scanning, don't use it. Only provide SPOTIFY_CLIENT_ID/SECRET if you need Spotify search; prefer limited-scope credentials and do not reuse high-privilege keys. Also double-check the package metadata (owner IDs) because the registry metadata and _meta.json disagree — that could be an innocuous packaging mistake but is worth confirming with the publisher.Like a lobster shell, security has layers — review code before you run it.
latestvk977ndwnryebf2hk96nt20t3nh83q5xd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔊 Clawdis
Binssonos
Install
Install wayne-sonoscli (go)
Bins: sonos
go install github.com/steipete/wayne-sonoscli/cmd/sonos@latest