Sonoscli

OpenClaw analysis

This skill is a straightforward Sonos control helper, with expected caution because it can change speaker playback, volume, groups, and queues.

Confidence: high

VirusTotal

Type: OpenClaw Skill Name: sonoscli Version: 1.0.0 The skill bundle is benign. It installs the `sonoscli` tool from a public Go module (`github.com/steipete/sonoscli`) and provides instructions for controlling Sonos speakers. The `SKILL.md` mentions the optional requirement for `SPOTIFY_CLIENT_ID/SECRET` environment variables for Spotify search functionality, which is a standard practice for API integrations and does not indicate any attempt at credential exfiltration or prompt injection against the agent.