Zonefoundry Local Sonos

Use this skill when an agent needs to control Sonos through ZoneFoundry `zf` on a same-LAN node. Start with readiness checks, then map user requests to safe...

This skill appears to be what it claims (local Sonos control via the zf CLI) but it instructs the agent to: (1) auto-update the local zf runtime, (2) fetch and treat zf-provided 'skill' content as authoritative every conversation, and (3) immediately execute commands returned by zf responses. Those behaviors are convenient for handling service-link flows, but they require you to trust the zf binary and its upstream repository. Before installing: verify the upstream repository (github.com/kisssam6886/zonefoundry) and consider pinning the install to a specific tag or commit instead of @latest; run zf and this skill on a dedicated/trusted LAN host (not a critical workstation); disable or require manual approval for automatic zf updates if possible; and be aware that following 'nextCommand' means the agent will run whatever the runtime instructs it to run, so only use this skill where you trust the local runtime and network environment.

Type: OpenClaw Skill Name: zonefoundry-local-sonos Version: 1.5.9 The skill bundle is classified as suspicious due to high-risk execution patterns that grant the `zf` binary significant control over the agent. Specifically, `SKILL.md` and `agents/openai.yaml` contain 'Hard rules' instructing the agent to 'Always obey' and immediately execute any command returned in the binary's JSON output (`nextCommand` and `nextAction`). This, combined with instructions for the binary to update itself (`zf update self`) and provide its own capability references to the agent (`zf skill show`), creates a self-modifying execution loop that could be leveraged for Remote Code Execution (RCE) if the binary or its source repository (github.com/kisssam6886/zonefoundry) is compromised.