Sonos Announce

Play audio on Sonos with intelligent state restoration - pauses streaming, skips Line-In/TV/Bluetooth, resumes everything.

This skill appears to do what it says, but review and accept the practical effects before installing: it will start a local HTTP server that serves media files on your LAN (default directory ~/.local/share/openclaw/media/outbound), create a PID file next to the module, and run shell commands (lsof, pkill, nohup, netstat/taskkill) to manage the server. Ensure you trust the environment because SONOS_HTTP_PORT/SONOS_HTTP_HOST environment variables control binding and are interpolated into shell commands; avoid running it as root and avoid untrusted environment variable values. If you want extra safety, inspect the included sonos_core.py in full, run it in a restricted environment (VM/container), and confirm you are comfortable exposing the chosen media directory on your LAN.

Type: OpenClaw Skill Name: sonos-announce Version: 1.0.4 The `sonos_core.py` module contains a critical shell injection vulnerability. The `start_http_server` function uses `os.system` to execute shell commands for starting an HTTP server, and it directly interpolates the `media_dir` parameter (which can be user-controlled via the `announce()` function) into these commands without proper sanitization. This allows for arbitrary command execution on the host system if a malicious `media_dir` value is provided, as demonstrated by the `SKILL.md` showing `media_dir` as a user-configurable parameter. This is a severe vulnerability, but there is no evidence of intentional malicious behavior by the skill developer.