Is maddydci45-svg/sonos safe?
Yes. maddydci45-svg/sonos is safe to install. Oathe's behavioral security audit gave the sonos skill by maddydci45-svg a trust score of 94/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/maddydci45-svg/sonos
Is maddydci45-svg/sonos safe to install?
This skill is a documentation wrapper for the sonoscli tool that provides Sonos speaker control functionality. The main security concern is the automatic installation of an external Go binary from GitHub, though this is transparently declared and from a reputable source.
What security issues were found in maddydci45-svg/sonos?
Category Scores
Findings (2)
MEDIUM Automatic external binary installation -25 ▶
The skill declares a dependency that would automatically download and install a Go binary from github.com/steipete/sonoscli when activated. While transparently declared in metadata, this represents automatic execution of external code.
LOW External dependency concerns -15 ▶
The skill relies entirely on an external Go binary for its functionality, creating a dependency chain that could be compromised. However, the dependency is from a known developer and clearly documented.
Should I install maddydci45-svg/sonos?
Oathe's verdict for maddydci45-svg/sonos is SAFE with a trust score of 94/100. Recommendation: Install with caution.