YouTube Music

Manage YouTube Music library, playlists, and discovery via ytmusicapi.

This skill is internally consistent for controlling YouTube Music via ytmusicapi, but its setup requires you to extract browser request headers and create a browser.json file that contains your account authentication data. Before installing: (1) verify the ytmusicapi package source (use a virtualenv and inspect PyPI/GitHub for the package), (2) store browser.json in a safe location and delete it when not needed, (3) consider creating/using a secondary Google account if you want to limit blast radius, (4) never paste headers into untrusted machines or public paste sites, and (5) only grant file-system or skill-level access to this skill/agent if you trust the runtime environment. If you want a less sensitive option, look for an OAuth-based flow or official API methods instead of copying browser headers.

Type: OpenClaw Skill Name: ytmusic Version: 1.0.1 The skill is classified as benign. The `SKILL.md` provides clear instructions for setting up the YouTube Music API, which involves installing a Python library (`pip install ytmusicapi`) and generating an authentication file (`browser.json`) from a cURL command. While the setup process requires the user to handle sensitive authentication data (cookies/tokens in the cURL command), these steps are explicitly for local authentication setup and do not contain any instructions for the AI agent to exfiltrate data, perform unauthorized actions, or engage in prompt injection with malicious intent. The file operations (reading `headers.txt`, writing `browser.json`) are necessary for the skill's stated purpose of managing YouTube Music.