← Back to Skills Marketplace
834
Downloads
2
Stars
0
Active Installs
8
Versions
Install in OpenClaw
/install spotify-claw
Description
Full Spotify Premium control + music analysis. Playback: play/pause/next/prev/volume/shuffle/queue. Analysis: top tracks, top artists, liked songs, genre pro...
Usage Guidance
Do not install or run this skill without verifying the missing pieces. Specifically: (1) confirm the repository/source actually provides ~/.openclaw/scripts/spotify.py and inspect its source code to ensure it only does the expected Spotify API and app-control actions, (2) verify the install steps (how the script gets installed) and prefer an explicit, packaged install procedure rather than ad hoc local scripts, (3) be aware this is macOS-specific (uses Keychain and likely AppleScript) — the registry did not declare an OS restriction, (4) only add your Spotify client_id/client_secret to Keychain after auditing the script so you know keys won't be exfiltrated, and (5) request the publisher add explicit install metadata, declare required credentials/OS, or bundle the script so you can review it. If you cannot verify the script/source, treat this skill as unsafe to use.
Capability Analysis
Type: OpenClaw Skill
Name: spotify-claw
Version: 2.0.1
The skill bundle provides a comprehensive interface for Spotify control and music analysis using the legitimate 'spotipy' library. It follows security best practices by instructing users to store credentials in the macOS Keychain rather than plain text. The instructions in SKILL.md are functional and aimed at ensuring the AI agent executes the necessary Python commands correctly, with no evidence of malicious prompt injection, data exfiltration, or unauthorized access.
Capability Assessment
Purpose & Capability
The SKILL.md describes a local script (~/.openclaw/scripts/spotify.py) that provides full Spotify control and uses macOS Keychain for credentials, but the registry bundle contains no code and no declared OS restriction. The described capabilities (auto-launching Spotify, keychain access, local script execution) are plausible for a Spotify helper, but the skill does not include the script or clearly declare that macOS and a local script are required.
Instruction Scope
Runtime instructions explicitly demand executing a local script path and adding client_id/client_secret to the macOS Keychain. The skill tells the agent to 'ALWAYS run python3 ~/.openclaw/scripts/spotify.py [cmd]' which gives the agent permission to execute arbitrary local code that is not supplied with the skill. The instructions also direct storing secrets with the macOS security CLI — credential handling is present but not declared in the registry metadata.
Install Mechanism
The registry lists no install spec and there are no code files, yet the SKILL.md metadata includes an install entry for the pip package 'spotipy'. Spotipy is a reasonable dependency, but it does not provide the referenced local script. This mismatch (no install, no code, but instructions that require a script) is inconsistent and increases risk because the expected script could come from an unverified external source or require manual installation steps not documented in the registry.
Credentials
The skill requires Spotify client_id/client_secret stored in macOS Keychain (instructions show using 'security add-generic-password'), but the registry metadata lists no required credentials or primaryEnv. Asking for client credentials is proportionate to the task, but the absence of declared credential requirements and OS restriction is a misalignment and could lead to unexpected secret storage/exposure if the script's behavior is not audited.
Persistence & Privilege
Although always:false and no autonomous elevation flags are set, the instruction to always execute a local script (which the skill does not ship) effectively grants the agent permission to run arbitrary local code whenever invoked. That creates a potentially large blast radius if the referenced script is malicious or replaced — a persistent implicit dependency without provenance is risky.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install spotify-claw - After installation, invoke the skill by name or use
/spotify-claw - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
spotify-claw 2.0.1
- Major SKILL.md rewrite with better structure, concise English instructions, and improved formatting
- Clarified setup, playback, analysis, discovery, and playlist builder commands
- New metadata: homepage link, emoji, install dependencies for OpenClaw
- Updated triggers, clearer agent usage tips, and critical notes about blocked Spotify APIs
- Now suitable and readable for all users, not just the original author
v2.0.0
Major v2.0.0 update: Expanded Spotify Premium control, music analysis, and discovery with improved workflow.
- Adds full playback control with auto-launch if Spotify is closed
- Introduces detailed music taste and genre analysis
- Enables music discovery and playlist creation without the Recommendations API
- Enhanced commands for viewing top tracks, artists, liked songs, and genre breakdowns
- Smarter playlist builder and filters (e.g., liked-by-artist)
- Credentials securely managed via macOS Keychain
v1.4.0
spotify-claw 1.4.0
- Major SKILL.md rewrite: modernized, restructured, and clarified documentation.
- Improved setup instructions and added homepage link.
- All command syntax examples condensed, grouped, and updated for clarity.
- Added metadata for install hints and emoji.
- Noted API limitations (blocked endpoints, workarounds explained).
- Agent tips and best practice reminders added for OpenClaw integration.
v1.3.0
spotify-claw 1.3.0
- Added a dedicated "Setup" section with credential storage and initial auth instructions.
- Removed hardcoded user/account details for improved privacy and generalization.
- Clarified which Spotify API features are blocked vs. available for new apps.
- No functional/command changes; documentation refresh and privacy improvements only.
v1.2.0
**Major restructure and simplification of skill files, with improved documentation.**
- Updated and greatly expanded SKILL.md with detailed usage instructions, examples, algorithms, and multi-language triggers (English/Russian).
- Skill metadata simplified and clarified; now ensures it always runs as a tool.
- Removed redundant documentation and helper files: README.md and requirements/scripts sources are gone.
- All information now consolidated into a single, thorough SKILL.md for easier onboarding and use.
- No changes to core functionality or commands—this release is fully documentation and packaging focused.
v1.1.0
All Russian text translated to English (comments, docstrings, print output). Triggers in SKILL.md updated to English.
v1.0.1
Version 1.0.1
- Updated README.md for clearer setup instructions and improved formatting.
- No functional changes to code; documentation only.
v1.0.0
Initial release—full Spotify Premium control and advanced music analysis with smart discovery features.
- Playback: Control Spotify (play, pause, next, previous, volume, shuffle, queue, auto-launch if app is closed).
- Analysis: Access top tracks/artists, playback history, liked songs, genre profile, and taste breakdown.
- Discovery: Find similar artists and expand your music library—no reliance on Spotify's Recommendations API.
- Playlist builder: Create and manage playlists (e.g., make-playlist, liked-by-artist, discover, add tracks).
- Secure credentials (macOS Keychain) and Russian-language command triggers supported.
- Includes full usage documentation via SKILL.md.
Metadata
Frequently Asked Questions
What is Spotify?
Full Spotify Premium control + music analysis. Playback: play/pause/next/prev/volume/shuffle/queue. Analysis: top tracks, top artists, liked songs, genre pro... It is an AI Agent Skill for Claude Code / OpenClaw, with 834 downloads so far.
How do I install Spotify?
Run "/install spotify-claw" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Spotify free?
Yes, Spotify is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Spotify support?
Spotify is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Spotify?
It is built and maintained by Mixx (@mixx85); the current version is v2.0.1.
More Skills