Small, local command line audio player that works well with claude code (no telemetry)
SaferSkills independently audited floyd (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Play or stop audio using the floyd command line player.
Supported formats: .mp3, .wav, .flac
The PID of any running floyd process is stored in /tmp/floyd.pid.
Check if floyd is on the PATH:
which floydIf not found, detect the OS and download the appropriate binary from the latest release:
OS=$(uname -s)
if [ "$OS" = "Darwin" ]; then
curl -L https://github.com/robrohan/floyd/releases/tag/v1.0.0/floyd-mac -o /usr/local/bin/floyd
else
curl -L https://github.com/robrohan/floyd/releases/tag/v1.0.0/floyd -o /usr/local/bin/floyd
fi
chmod +x /usr/local/bin/floydIf /usr/local/bin is not writable, try ~/.local/bin instead (create it if needed) and inform the user they may need to add it to their PATH.
/tmp/floyd.pid exists. If not, tell the user nothing is playing.kill $(cat /tmp/floyd.pid) && rm /tmp/floyd.pid$ARGUMENTS is empty, ask the user which file or directory they want to play./tmp/floyd.pid exists, stop any currently playing audio first:kill $(cat /tmp/floyd.pid) 2>/dev/null; rm -f /tmp/floyd.pid (floyd -d "$ARGUMENTS") &
echo $! > /tmp/floyd.pid (find "$ARGUMENTS" -type f \( -iname "*.mp3" -o -iname "*.wav" -o -iname "*.flac" \) | sort | while read f; do floyd -d "$f"; done) &
echo $! > /tmp/floyd.pid/floyd stop.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.