skills/craftos-dev/craftbot/sonoscli/Gen Agent Trust Hub

sonoscli

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the Go module system to download and install the sonos CLI from a developer's public GitHub repository (github.com/steipete/sonoscli).
  • [COMMAND_EXECUTION]: The skill instructions involve running the sonos binary to interact with local hardware; these operations are standard for network-based audio control.
  • [CREDENTIALS_UNSAFE]: The documentation references Spotify API environment variables for optional features but does not include any hardcoded credentials or unsafe storage practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 05:36 PM
Security Audit — agent-trust-hub — sonoscli