← Back to Skills Marketplace
Spotify Player
by
Peter Steinberger
· GitHub ↗
· v1.0.0
28037
Downloads
55
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install spotify-player
Description
Terminal Spotify playback/search via spogo (preferred) or spotify_player.
Usage Guidance
Install only if you trust the `spogo` CLI and are comfortable letting it import Spotify authentication from your Chrome profile. Prefer an official OAuth or device-code login if available, and verify where imported tokens are stored and how to revoke or remove them.
Capability Analysis
Type: OpenClaw Skill
Name: spotify-player
Version: 1.0.0
The skill bundle is classified as suspicious due to the `spogo auth import --browser chrome` command specified in `SKILL.md`. This command accesses sensitive browser cookies for authentication, which, while plausibly needed for the stated purpose of a Spotify player, represents a high-risk capability that could be abused. There is no clear evidence of intentional malicious behavior or prompt injection against the agent for data exfiltration or unauthorized actions within the provided files, but the direct access to browser data warrants a 'suspicious' classification.
Capability Assessment
Purpose & Capability
The playback, search, device, and status commands fit the stated Spotify terminal-player purpose, and Spotify authentication is expected for that use case.
Instruction Scope
The setup step explicitly uses `spogo auth import --browser chrome`, which reaches into browser session material, but the skill does not explain what is read, where it is stored, how long it persists, or how to revoke access.
Install Mechanism
Install metadata only declares Homebrew installation of `spogo` or `spotify_player`; the sensitive authentication import is documented as a visible setup command rather than hidden automatic execution.
Credentials
Browser cookies are sensitive account/session credentials. Importing them is plausible for a Spotify CLI, but high-impact enough that the missing warning and scoping guidance warrant Review.
Persistence & Privilege
The skill likely creates persistent local authentication state for Spotify control, but provides no containment, cleanup, revocation, or safe-handling guidance.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spotify-player - After installation, invoke the skill by name or use
/spotify-player - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Metadata
Frequently Asked Questions
What is Spotify Player?
Terminal Spotify playback/search via spogo (preferred) or spotify_player. It is an AI Agent Skill for Claude Code / OpenClaw, with 28037 downloads so far.
How do I install Spotify Player?
Run "/install spotify-player" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Spotify Player free?
Yes, Spotify Player is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Spotify Player support?
Spotify Player is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Spotify Player?
It is built and maintained by Peter Steinberger (@steipete); the current version is v1.0.0.
More Skills