setup-sonos-lastfm
Guides users through setting up Sonos Last.fm Scrobbler for automatic music scrobbling on various operating systems.
Install this skill
Security score
The setup-sonos-lastfm skill was audited on May 14, 2026 and we found 17 security issues across 3 threat categories, including 3 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 57 | If the command is not found, check if `~/.local/bin` is in PATH and guide the user to add it. |
Access to hidden dotfiles in home directory
| 83 | 1. **Storage method**: system keyring (most secure) or config file (`~/.sonos_lastfm/.env`) |
Access to hidden dotfiles in home directory
| 124 | mkdir -p ~/.config/systemd/user |
Access to hidden dotfiles in home directory
| 127 | Write `~/.config/systemd/user/sonos-lastfm.service`: |
Access to hidden dotfiles in home directory
| 191 | **Important**: Adjust the path to `sonos-lastfm` — find it with `which sonos-lastfm`. If installed via `uv`, it may be at `~/.local/bin/sonos-lastfm`. |
Access to hidden dotfiles in home directory
| 264 | - Add `~/.local/bin` to your PATH: |
Access to hidden dotfiles in home directory
| 265 | - **bash**: `echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bashrc && source ~/.bashrc` |
Access to hidden dotfiles in home directory
| 266 | - **zsh**: `echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc` |
Access to hidden dotfiles in home directory
| 267 | - **fish**: `fish_add_path ~/.local/bin` |
Access to .env file
| 83 | 1. **Storage method**: system keyring (most secure) or config file (`~/.sonos_lastfm/.env`) |
Prompting for password/secret input
| 85 | 3. **Password**: their Last.fm password (hidden input) |
Prompting for password/secret input
| 87 | 5. **API Secret**: the secret from step 3 (hidden input) |
Access to system keychain/keyring
| 83 | 1. **Storage method**: system keyring (most secure) or config file (`~/.sonos_lastfm/.env`) |
External URL reference
| 36 | - **Windows**: Download from https://www.python.org/downloads/ — check "Add to PATH" |
External URL reference
| 63 | 1. Open https://www.last.fm/api/account/create in their browser |
External URL reference
| 168 | "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
External URL reference
| 272 | - Verify your API key at https://www.last.fm/api/accounts |