add-listen-hotkey
Installs a global hotkey for triggering 'deus listen' and sets up necessary dependencies for voice recognition.
Install this skill
or
63/100
Security score
The add-listen-hotkey skill was audited on Jun 1, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 61
Template literal with variable interpolation in command context
SourceSKILL.md
| 61 | ```bash |
medium line 82
Access to hidden dotfiles in home directory
SourceSKILL.md
| 82 | Set `WHISPER_MODEL` in `~/.zshrc` / `~/.bashrc` / Windows user environment variables |
medium line 113
Access to hidden dotfiles in home directory
SourceSKILL.md
| 113 | Write `~/.hammerspoon/deus-listen.lua`: |
medium line 137
Access to hidden dotfiles in home directory
SourceSKILL.md
| 137 | Source the file from `~/.hammerspoon/init.lua`: |
medium line 150
Access to hidden dotfiles in home directory
SourceSKILL.md
| 150 | Append to `~/.config/sxhkd/sxhkdrc` (create if missing): |
medium line 195
Access to hidden dotfiles in home directory
SourceSKILL.md
| 195 | - **macOS**: delete `~/.hammerspoon/deus-listen.lua`, remove the `require` line from `init.lua`, reload Hammerspoon. |
medium line 196
Access to hidden dotfiles in home directory
SourceSKILL.md
| 196 | - **Linux**: remove the appended block from `~/.config/sxhkd/sxhkdrc`, `pkill -USR1 sxhkd`. |
low line 63
External URL reference
SourceSKILL.md
| 63 | MODEL_URL="https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-base.bin" |
low line 75
External URL reference
SourceSKILL.md
| 75 | https://huggingface.co/ggerganov/whisper.cpp/resolve/main/ggml-large-v3-turbo.bin |
Scanned on Jun 1, 2026
View Security Dashboard