← Back to Skills Marketplace
wgzesg

spotify-download

by Wang Zesong · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
126
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install spotify-download
Description
Download MP3s from Spotify playlists by fetching metadata, searching YouTube for tracks, and converting audio using ffmpeg with optional Spotify API credenti...
Usage Guidance
This skill's runtime instructions align with its purpose, but the registry metadata omits key requirements and it directs you to install third-party packages and a GitHub repo. Before installing or running: 1) Confirm the source: inspect the referenced GitHub repo (https://github.com/zesong/spotify-download.git) and the PyPI package code to ensure no unexpected behavior. 2) Install supporting binaries (ffmpeg, yt-dlp) from trusted package managers (Homebrew, apt, Chocolatey or official project sites). 3) Avoid supplying your primary Spotify credentials unless necessary; use a disposable app/client if possible and revoke it after use. 4) Be aware of legal/terms-of-service issues when downloading copyrighted music—this may be prohibited in your jurisdiction or by service terms. 5) Ask the publisher to update registry metadata to declare required binaries and optional env vars so the skill's footprint is clear. Additional evidence (packaged code, a verified homepage, or a trustworthy publisher) would raise confidence.
Capability Analysis
Type: OpenClaw Skill Name: spotify-download Version: 1.0.0 The skill bundle consists of documentation (SKILL.md) and metadata for a Spotify playlist downloader. It describes a standard workflow using legitimate tools like ffmpeg and yt-dlp to fetch metadata and download audio. No executable code was provided for analysis, and the instructions contain no evidence of prompt injection, data exfiltration, or malicious intent.
Capability Assessment
Purpose & Capability
The SKILL.md behavior (fetch Spotify metadata, search YouTube, download/convert with yt-dlp and ffmpeg) is coherent with the name/description. However, the registry metadata declares no required binaries or env vars while the instructions clearly require Python 3.10+, ffmpeg, and yt-dlp and reference optional Spotify credentials. The discrepancy between metadata and SKILL.md is noteworthy.
Instruction Scope
Instructions stay within the stated task: fetch playlist metadata (embed or API), search YouTube, download audio, and convert to MP3. They do not direct the agent to read unrelated system files or exfiltrate arbitrary data. They do reference setting SPOTIFY_CLIENT_ID/SECRET as environment variables (optional) which are relevant to the task but were not declared in the registry metadata.
Install Mechanism
There is no install spec in the registry, but SKILL.md instructs users to install a third-party 'spotify-download' package via pip/pipx or clone a GitHub repo (https://github.com/zesong/spotify-download.git). It also references 'uvx' as an invocation method. Installing packages from PyPI or cloning arbitrary GitHub repos executes external code and is higher risk; the skill metadata should have declared these dependencies or an install mechanism to allow review. The lack of an official homepage and unknown owner increases the need for caution.
Credentials
The only credentials mentioned are optional Spotify Client ID/Secret, which are proportional to the stated need for accessing private playlists or improving metadata. However, the registry did not list these env vars as optional fields even though SKILL.md instructs how to set them. No other credentials are requested, which is appropriate. Users should avoid supplying long-lived production credentials unless necessary.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent platform privileges. It does not ask to modify other skills or system-wide configs. Autonomous model invocation is enabled by default but is not, on its own, a red flag here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install spotify-download
  3. After installation, invoke the skill by name or use /spotify-download
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of spotify-download. - Download MP3 files from Spotify playlists, including public and private playlists (with credentials). - Supports multiple installation options: uvx, pip, pipx, or local development. - Downloads to a specified directory, saving both audio files and playlist metadata. - Uses ffmpeg and yt-dlp for audio extraction and conversion. - Handles concurrent downloads and includes advanced options for output, speed, and re-downloads. - Requires no Spotify credentials for public playlists; supports credential use for private or more accurate data.
Metadata
Slug spotify-download
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is spotify-download?

Download MP3s from Spotify playlists by fetching metadata, searching YouTube for tracks, and converting audio using ffmpeg with optional Spotify API credenti... It is an AI Agent Skill for Claude Code / OpenClaw, with 126 downloads so far.

How do I install spotify-download?

Run "/install spotify-download" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is spotify-download free?

Yes, spotify-download is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does spotify-download support?

spotify-download is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created spotify-download?

It is built and maintained by Wang Zesong (@wgzesg); the current version is v1.0.0.

💬 Comments