← Back to Skills Marketplace
jrojas537

Discogs Cli

by jrojas537 · GitHub ↗ · v1.3.1
cross-platform ⚠ suspicious
835
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install discogs-cli
Description
An OpenClaw skill to manage a user's vinyl record collection on Discogs.
README (SKILL.md)

Discogs Collection Manager Skill for OpenClaw

This skill provides a command-line interface to interact with a user's record collection on Discogs.com. It is designed specifically for use within the OpenClaw assistant and uses a subcommand structure similar to git or gog.

Prerequisites

This skill is a Go program and requires the Go toolchain to be installed.

Installation (Debian/Ubuntu): sudo apt-get update && sudo apt-get install -y golang-go

One-Time Setup

Before first use, you must run the included installer script. This will compile the Go binary and place it in a predictable location within the skill's directory.

  1. Run the installer:

    skills/discogs-cli/install.sh
    
  2. Configure Credentials: This command saves your Discogs token and username to a configuration file (~/.config/discogs-cli/config.yaml).

    skills/discogs-cli/bin/discogs-cli config set -u "YourUsername" -t "YourSecretToken"
    

Usage

All commands must be prefixed with the full path to the binary.

Fetch Album Art

Downloads the album art for a given release and displays it in the chat.

skills/discogs-cli/bin/discogs-cli release art \x3Crelease_id>

List Collection Folders

Shows all folders and their record counts.

skills/discogs-cli/bin/discogs-cli collection list-folders

List Releases in a Folder

Shows all records within a specific folder. The output is a formatted table.

# List all releases from the "All" folder (default)
skills/discogs-cli/bin/discogs-cli collection list

# List all releases from a specific folder by ID
skills/discogs-cli/bin/discogs-cli collection list --folder 8815833

Search the Discogs Database

Search for releases, artists, or labels.

# Search for a release (default type)
skills/discogs-cli/bin/discogs-cli search "Daft Punk - Discovery"

# Search for an artist
skills/discogs-cli/bin/discogs-cli search --type artist "Aphex Twin"

Manage Your Wantlist

Work with your Discogs wantlist.

List Your Wantlist

Displays all items in your wantlist.

skills/discogs-cli/bin/discogs-cli wantlist list

Add to Your Wantlist

Adds a release to your wantlist by its ID.

skills/discogs-cli/bin/discogs-cli wantlist add 12345

Remove from Your Wantlist

Removes a release from your wantlist by its ID.

skills/discogs-cli/bin/discogs-cli wantlist remove 12345

Caching and Valuation Commands

These commands rely on a local cache for performance. You must run sync first to populate the cache.

Sync Collection Details (Slow)

Fetches detailed data for every item in the collection and builds a local cache. This command is slow and should be run in the background. Inform the user that this will take time.

skills/discogs-cli/bin/discogs-cli collection sync

Get Collection Value (Fast)

Reads the local cache to provide the estimated market value for each item and the total collection. This command is fast. If it fails, the cache is likely missing, and you need to run the sync command.

skills/discogs-cli/bin/discogs-cli collection value

Get Single Release Details (Fast)

Provides a detailed view of a single release, including tracklist.

skills/discogs-cli/bin/discogs-cli collection get 35198584
Usage Guidance
This skill appears to implement a real Discogs CLI and uses local compilation (go build). Before installing: 1) Be aware you must provide your Discogs username and personal access token — the tool stores them in a local config file (~/.config/discogs-cli/config.yaml) unless you supply them via environment variables. 2) The code writes album art to a hard-coded path: '/home/Ev05bot/.openclaw/workspace/art_cache/discogs'. That looks like a developer-specific path and may be unintended or problematic in your environment; ask the author to change it to a configurable or user-specific path (for example, use os.UserCacheDir() or relative skill workspace). 3) The README suggests optionally moving the binary to /usr/local/bin (requires sudo); only do that if you trust the code. 4) If you run this on a shared or hosted agent, audit file write locations and ensure the tool cannot access or overwrite sensitive files. If the hard-coded path or the AutomaticEnv behavior is unexplained by the author, treat the package cautiously or request a fix before use.
Capability Analysis
Type: OpenClaw Skill Name: discogs-cli Version: 1.3.1 The skill is classified as suspicious due to a critical vulnerability related to insecure credential storage. The `scripts/cmd/root.go` file uses `os.MkdirAll(configPath, os.ModePerm)` to create the `~/.config/discogs-cli` directory with `0777` permissions, making it world-writable and potentially world-readable. This could allow other local users on the system to access the `config.yaml` file containing the Discogs personal access token and username, leading to local information disclosure. While there is no evidence of intentional malicious behavior like data exfiltration to external endpoints or prompt injection against the agent, this severe vulnerability warrants a 'suspicious' classification.
Capability Assessment
Purpose & Capability
Name/description align with the code and requested binary (Go). The code implements Discogs collection, search, wantlist, caching and art download functionality which matches the skill description.
Instruction Scope
The runtime instructions are straightforward (build with Go, run installer, run `config set` to store token/username), but the code writes album art to a hard-coded absolute path: '/home/Ev05bot/.openclaw/workspace/art_cache/discogs'. That is unexpected for a general-purpose skill (should use the invoking user's home or a relative/workspace path) and looks like a leftover or targeted path. This could fail or, worse, attempt to write into another user's area in a multi-user environment.
Install Mechanism
No remote installers are used in the registry metadata. The provided install.sh compiles local Go source into a binary (go build). Dependencies are typical Go modules from public repos. No downloads from obscure hosts or extract-from-URL steps are present.
Credentials
The skill does not declare required environment variables in metadata (none listed), and SKILL.md instructs saving Discogs username/token to a local config file — which is reasonable. However, the code calls viper.AutomaticEnv(), so configuration keys (like 'token'/'username') can also be picked up from environment variables. This behavior is not documented in SKILL.md and could cause unexpected reads from env vars if present. No unrelated cloud credentials or broad secrets are requested.
Persistence & Privilege
The skill does not request always:true or any elevated/persistent platform privileges. It only creates its own config and cache files under the user's directories (aside from the hard-coded path noted above). It does not modify other skills or system-wide agent configs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install discogs-cli
  3. After installation, invoke the skill by name or use /discogs-cli
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.3.1
- Bumped version number in package.json to 1.3.1. - No functional or documentation changes in this release.
v1.3.0
- Refactored the Discogs API client: moved logic from scripts/cmd/ to discogs/client.go for better organization. - Removed obsolete files: scripts/cmd/client.go, scripts/cmd/types.go, and scripts/cmd/wantlist_client.go. - Updated wantlist command implementation to use new client structure. - Updated dependencies in package.json.
v1.2.1
- Added install.sh script for simplified installation and setup. - Updated documentation to direct users to run install.sh and use the skill-specific binary path for all commands. - Clarified usage instructions for improved integration within the OpenClaw assistant. - Minor description and metadata adjustments for accuracy and clarity.
v1.2.0
feat(release): Add 'art' command to fetch album art and improve file handling.
v1.1.0
Add search and wantlist commands
Metadata
Slug discogs-cli
Version 1.3.1
License
All-time Installs 0
Active Installs 0
Total Versions 5
Frequently Asked Questions

What is Discogs Cli?

An OpenClaw skill to manage a user's vinyl record collection on Discogs. It is an AI Agent Skill for Claude Code / OpenClaw, with 835 downloads so far.

How do I install Discogs Cli?

Run "/install discogs-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Discogs Cli free?

Yes, Discogs Cli is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Discogs Cli support?

Discogs Cli is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Discogs Cli?

It is built and maintained by jrojas537 (@jrojas537); the current version is v1.3.1.

💬 Comments