多源音乐下载

从10个音乐平台搜索并下载MP3，自动切换音源和处理防盗链，保存至/tmp/music目录。

What to consider before installing or running: - The code disables SSL verification (requests.verify=False) and suppresses related warnings; this makes HTTPS requests susceptible to MITM attacks — prefer enabling verification or running in a controlled environment. - The skill downloads content from many third-party music sites and saves files under /tmp/music; verify you are comfortable with legal/terms-of-service implications of scraping/downloading from those sites. - SKILL.md examples use an absolute path (/root/.openclaw/...), which may not match your environment; check and run the script from a non-privileged account. - Because this is an instruction-only skill with bundled code, review the Python file yourself (it is included) before running. If you want to reduce risk: run it in a sandbox/container, change the output directory from /tmp to a safer location, and re-enable SSL verification.

Type: OpenClaw Skill Name: music-downloader Version: 1.0.0 The music-downloader skill is designed to search and download MP3 files from ten different music platforms by scraping their web interfaces. While the code in music_downloader.py aligns with the stated purpose in SKILL.md, it contains a significant security vulnerability: SSL certificate verification is explicitly disabled (verify=False) for all network requests across multiple external domains. This practice exposes the agent to Man-in-the-Middle (MITM) attacks. Although no evidence of intentional malice or data exfiltration was found, the combination of unverified network connections and the bypass of anti-leeching mechanisms classifies this bundle as suspicious.