← Back to Skills Marketplace
Spotify Controller
by
Egemen Yerdelen
· GitHub ↗
· v1.0.1
446
Downloads
0
Stars
3
Active Installs
2
Versions
Install in OpenClaw
/install spotify-controller
Description
Control Spotify playback and devices from an AI agent using spotify.py and the official Spotify Web API. Use when users ask to check current track, play/paus...
Usage Guidance
This skill appears coherent and implements only Spotify API calls. Before installing: (1) verify the skill source you obtained it from and inspect scripts/spotify.py yourself (it is included and readable), (2) do not commit SPOTIFY_* values into version control — store them in a secure secrets store or .env excluded from git, (3) generate the refresh token locally and only supply the long-lived refresh token to the runtime you trust, (4) limit the Spotify app scopes to the least privileges needed (playback control and read state), and (5) confirm the 'uv pip install' lines are applicable to your environment (use plain 'pip install requests' if unsure). If you do not want the agent to control playback autonomously, avoid enabling autonomous invocation or restrict when the skill can be called.
Capability Analysis
Type: OpenClaw Skill
Name: spotify-controller
Version: 1.0.1
The OpenClaw Spotify Controller skill is benign. Both the `SKILL.md` documentation and the `scripts/spotify.py` code are transparent and align with the stated purpose of controlling Spotify playback via its official Web API. The Python script securely handles Spotify API credentials from environment variables, uses the `requests` library for HTTP communication exclusively with `accounts.spotify.com` and `api.spotify.com`, and properly sanitizes user input for search queries using `urllib.parse.quote`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the AI agent. The setup instructions are standard for OAuth 2.0 and Python dependency management.
Capability Assessment
Purpose & Capability
Name/description (control Spotify playback) align with required env vars (client id/secret/refresh token), the python script, and the documented Spotify Web API calls. Requested binaries and packages (python3, requests) are appropriate.
Instruction Scope
SKILL.md instructs how to obtain and provide Spotify credentials and how to run the included spotify.py. Instructions do not ask the agent to read unrelated files or send data to unexpected endpoints; the script only talks to accounts.spotify.com and api.spotify.com.
Install Mechanism
No install spec (instruction-only) and the script is included directly. SKILL.md asks to install the Python 'requests' package which is proportional. Small oddity: SKILL.md uses the prefix 'uv pip install ... --system' in multiple places (likely a typo or platform-specific helper); verify that your runtime supports that command or use plain 'pip install requests' before relying on it.
Credentials
Three environment variables (SPOTIFY_CLIENT_ID, SPOTIFY_CLIENT_SECRET, SPOTIFY_REFRESH_TOKEN) are expected and necessary for refreshing an access token and calling Spotify endpoints. No unrelated secrets or superfluous environment requirements are requested.
Persistence & Privilege
Skill is not always-enabled and is user-invocable. It does not request system-wide changes or modify other skills. SKILL.md suggests chown/chmod on the workspace file as operational guidance, which is normal but requires appropriate permissions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spotify-controller - After installation, invoke the skill by name or use
/spotify-controller - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Minor update with documentation improvements and metadata additions:
- Added a homepage link and structured metadata (including emoji and required environment variables).
- Clarified usage of Spotify Web API and environment variable requirements in the description.
- Improved security notes to specify domains touched by the script.
- Minor clarifications and formatting fixes in documentation.
v1.0.0
Version 1.0.0 – Initial release of Spotify Controller Skill.
- Control Spotify playback and devices using spotify.py and the Spotify Web API.
- Provides commands for play, pause, next, previous, volume, search, device management, and direct URI playback.
- Works seamlessly on local, Docker, VPS, and hybrid environments without needing a local Spotify client.
- Step-by-step setup instructions for developer credentials and environment configuration.
- Includes detailed usage examples, troubleshooting, and operational/security guidance.
Metadata
Frequently Asked Questions
What is Spotify Controller?
Control Spotify playback and devices from an AI agent using spotify.py and the official Spotify Web API. Use when users ask to check current track, play/paus... It is an AI Agent Skill for Claude Code / OpenClaw, with 446 downloads so far.
How do I install Spotify Controller?
Run "/install spotify-controller" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Spotify Controller free?
Yes, Spotify Controller is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Spotify Controller support?
Spotify Controller is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Spotify Controller?
It is built and maintained by Egemen Yerdelen (@egemenyerdelen); the current version is v1.0.1.
More Skills