Play Music from YouTube

Play music on YouTube via browser automation with playwright-cli. Use when the user wants to: (1) play a specific song (e.g. 'play Money Money Money by ABBA') (2) play songs by an artist as a playlist or mix (e.g. 'play Jay Chou's songs') (3) play genre or mood-based music (e.g. 'play relaxing spa music', 'play 60s Chinese oldies') (4) control playback — next, pause, resume, stop, skip ad, change song, close the player. Also handles song/artist name corrections from voice transcription errors.

This skill appears to do what it says (automating a visible browser with playwright-cli to play YouTube). Before enabling it, consider: (1) it will open a visible browser and by default use a persistent profile that stores cookies, localStorage, and other profile data under $WORKSPACE/.playwright-cli or ~/.playwright-cli — if you are logged into YouTube/Google this lets the skill act as your signed-in user; (2) snapshot and state-save commands will write files (snapshots, auth.json) into your workspace/home that may include sensitive session data — review or run in an isolated workspace if you are concerned; (3) there are no indications the skill exfiltrates data to external servers, but you should install playwright-cli from a trusted source and inspect any files created by the tool; (4) if you prefer less persistence/privacy risk, request headless mode and avoid --persistent or periodically delete the .playwright-cli profile. If you want, I can list exact files and paths the skill may write and provide step-by-step guidance to run it in a disposable workspace.

Type: OpenClaw Skill Name: my-play-music-from-yt Version: 0.0.9 This skill is classified as suspicious due to the use of `playwright-cli` with several high-risk capabilities, even though they are plausibly needed for browser automation. Specifically, the skill instructs the agent to use a `--persistent` browser profile (SKILL.md) which saves sensitive login state (cookies, localStorage, IndexedDB) to disk, and allows arbitrary JavaScript execution via `playwright-cli eval` (SKILL.md, references/playwright-ref.md). The `playwright-cli` tool also has capabilities to save/load browser state to/from files (`state-save`/`state-load`) and take screenshots (`screenshot`), which could be leveraged for data exfiltration, although the current instructions do not explicitly direct such malicious use. Additionally, the skill requires the user to grant broad macOS system permissions (Screen Recording, Automation, Accessibility) for `playwright-cli` to function.