← 返回 Skills 市场
tmoody1973

Music Research (Crate)

作者 Tarik Moody · GitHub ↗ · v0.2.3
cross-platform ⚠ suspicious
437
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install crate-music-research
功能描述
AI-powered music research with 92+ tools across 17 sources — MusicBrainz, Bandcamp, Discogs, Genius, Last.fm, Wikipedia, and more. Influence tracing, track v...
使用说明 (SKILL.md)

Music Research with Crate

You have access to Crate's music research tools via MCP. These tools connect to 17 real music databases and 26 publications. Use them to answer music questions with verified, cited data.

MCP Server Setup

Add Crate as an MCP server in your configuration:

{
  "mcpServers": {
    "crate": {
      "command": "npx",
      "args": ["-y", "crate-cli", "--mcp-server"],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}"
      }
    }
  }
}

This exposes all active tools over stdio. Additional API keys unlock more servers (see Optional API Keys below).

Research Patterns

Artist Research

Cross-reference multiple sources for comprehensive artist profiles:

  1. musicbrainz_search_artist — canonical artist ID, discography, relationships
  2. genius_get_artist — bio, aliases, social links, annotations
  3. lastfm_get_artist_info — listening stats, similar artists, tags
  4. discogs_search_artist — label history, pressings, catalog numbers
  5. bandcamp_search — independent releases, merch, direct-support links
  6. wikipedia_search — biographical context, career timeline

Always start with MusicBrainz for the canonical ID, then fan out to other sources.

Influence Tracing

Discover how artists connect through published music criticism:

  1. Use influence_trace_influence to search 26 publications for co-mentions
  2. Results include publication name, critic byline, date, and URL for every connection
  3. Use influencecache_get_path for cached paths (instant BFS results)
  4. Use influencecache_get_neighbors to explore an artist's immediate connections
  5. The influence graph grows with every query — cached in local SQLite

Always cite the publication and review when presenting influence connections. Every claim needs a URL.

Track Verification

CRITICAL: Never invent track names. Always verify tracks exist before presenting them.

  1. bandcamp_get_artist_tracks — primary source for independent artists
  2. musicbrainz_search_recording — primary source for mainstream releases
  3. youtube_search — fallback verification source
  4. If a track cannot be verified against any real database, do not include it

Vinyl & Collecting

  1. discogs_get_release — pressing details, labels, catalog numbers, condition notes
  2. discogs_get_master_release — all versions/pressings of an album
  3. discogs_get_marketplace_stats — current market prices and trends
  4. collection_add_record / collection_search — manage the user's personal collection

Playlist Building

  1. Research tracks using the sources above — verify every track exists
  2. playlist_create — create a new playlist
  3. playlist_add_track — add verified tracks with source URLs
  4. playlist_export_m3u — export to M3U format for external players
  5. Never include a track that hasn't been confirmed against a real database

Publishing

Share research as public web pages or blog posts:

  1. telegraph_create_page — instant shareable page, no account needed
  2. telegraph_create_index — create a living index of all published pages
  3. tumblr_create_post — post to the user's Tumblr blog with markdown formatting
  4. tumblr_tag_post — auto-tag posts with artist names and genres
  5. Always include citations and source links in published research

Critical Rules

  • Every claim must be backed by a real data source — never hallucinate facts, tracks, or connections
  • Influence connections require full attribution: publication name, critic, date, and URL
  • Verify tracks against Bandcamp, MusicBrainz, or YouTube before including in any list
  • Cross-reference facts across multiple sources when possible
  • The influence system searches 26 publications including Pitchfork, The Wire, Resident Advisor, Stereogum, The Guardian, NPR, NME, Bandcamp Daily, and more

Available Servers

Server Tools Env Required Description
MusicBrainz 6 Artist/release/recording metadata
Bandcamp 7 Independent music, artist tracks
Wikipedia 3 Biographical context
YouTube 6 Video search, audio playback
Radio varies Internet radio streaming
News varies Music news via RSS
Collection 5 Local record collection (SQLite)
Playlist varies Playlist management (SQLite)
Influence Cache 8 Local influence graph (SQLite)
Telegraph 5 Anonymous publishing
Last.fm 7 LASTFM_API_KEY Scrobbles, similar artists
Genius 8 GENIUS_ACCESS_TOKEN Lyrics, annotations
Discogs 9 DISCOGS_KEY, DISCOGS_SECRET Vinyl catalog, marketplace
Web Search 4 TAVILY_API_KEY or EXA_API_KEY Publication search
Influence 3 TAVILY_API_KEY or EXA_API_KEY Live influence tracing
Tumblr 5 TUMBLR_CONSUMER_KEY, TUMBLR_CONSUMER_SECRET Blog publishing
Memory 3 MEM0_API_KEY Persistent user preferences

Optional API Keys

Set these environment variables to unlock additional servers:

LASTFM_API_KEY        — Last.fm listening stats and similar artists
GENIUS_ACCESS_TOKEN   — Lyrics, annotations, and artist bios
DISCOGS_KEY           — Vinyl catalog, labels, and marketplace
DISCOGS_SECRET        — Required with DISCOGS_KEY
TAVILY_API_KEY        — Web search across 26 music publications
EXA_API_KEY           — Neural semantic search for influence tracing
YOUTUBE_API_KEY       — Improved YouTube search results
TUMBLR_CONSUMER_KEY   — Publish research to your Tumblr blog
TUMBLR_CONSUMER_SECRET — Required with TUMBLR_CONSUMER_KEY
MEM0_API_KEY          — Persistent memory across sessions

Only ANTHROPIC_API_KEY is required. All other servers are optional.

安全使用建议
This skill is coherent with its stated purpose, but it will cause your agent to run `npx crate-cli` (unversioned) and hand that process your ANTHROPIC_API_KEY. That means: (1) arbitrary code from the npm registry will be executed on your environment at runtime, (2) the crate-cli process can send queries and any user data to external services (including Anthropic) and persist data locally in SQLite. Before installing: verify the crate-cli package source and version (prefer a pinned version), inspect the crate-cli code or its GitHub repo, consider running it in an isolated environment (container), avoid providing sensitive/high-privilege keys unless you trust the package, and prefer a workflow where you manually install and review the CLI rather than letting npx fetch/execute it automatically.
功能分析
Type: OpenClaw Skill Name: crate-music-research Version: 0.2.3 The skill bundle is classified as suspicious due to a significant supply chain vulnerability. It instructs the OpenClaw agent to execute `npx -y crate-cli` (in `SKILL.md`), which downloads and runs an arbitrary package from npm. This introduces a risk where a compromised `crate-cli` package could lead to arbitrary code execution on the agent's host. While the skill's stated purpose (music research, database interaction, web search, and publishing) plausibly requires broad network and file system access, the reliance on auto-installing an external npm package without further vetting constitutes a high-risk vulnerability, even though no explicit malicious intent is present in the provided files.
能力评估
Purpose & Capability
The name/description (music research across many sources) aligns with the declared requirements: it needs npx to run the crate-cli and an ANTHROPIC_API_KEY which plausibly powers LLM reasoning inside the CLI. Optional API keys for individual music services are listed as optional in the SKILL.md and are coherent with the described capabilities.
Instruction Scope
The SKILL.md instructs the agent to add an MCP server entry that launches `npx -y crate-cli --mcp-server` and exposes many tools over stdio; it also documents local SQLite caches (collection, playlist, influence cache). The instructions do not ask the agent to read unrelated system files or secrets, but they do instruct running an external CLI that will access networks and persist local caches and configuration. That means queries and data may be transmitted to external services and persisted locally.
Install Mechanism
There is no install spec, but runtime usage relies on `npx` to download and execute `crate-cli` from the npm registry with no pinned version in the provided example. This effectively executes remote code on the agent host at runtime (supply-chain risk). The skill will therefore cause dynamic code to be fetched and run, which increases risk compared to instruction-only behavior that uses only built-in binaries.
Credentials
The one required environment variable (ANTHROPIC_API_KEY) is plausible if the CLI uses Anthropic's models for reasoning. However, the SKILL.md instructs passing that key into the spawned process; that gives the remote-executed CLI full access to the key and any requests it makes to Anthropic. Many additional optional API keys are listed for other services — these are optional but sensitive if provided.
Persistence & Privilege
always:false (good), but the instructions ask the user/agent to add a persistent MCP server entry and the CLI creates local SQLite caches (influence graph, collection, playlists). This results in long-lived configuration and locally stored data; not inherently malicious, but a persistence/privacy consideration.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install crate-music-research
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /crate-music-research 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.2.3
Initial release — 92 tools across 17 sources. Influence tracing, track verification, playlist building, and publishing.
元数据
Slug crate-music-research
版本 0.2.3
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Music Research (Crate) 是什么?

AI-powered music research with 92+ tools across 17 sources — MusicBrainz, Bandcamp, Discogs, Genius, Last.fm, Wikipedia, and more. Influence tracing, track v... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 437 次。

如何安装 Music Research (Crate)?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install crate-music-research」即可一键安装,无需额外配置。

Music Research (Crate) 是免费的吗?

是的,Music Research (Crate) 完全免费(开源免费),可自由下载、安装和使用。

Music Research (Crate) 支持哪些平台?

Music Research (Crate) 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Music Research (Crate)?

由 Tarik Moody(@tmoody1973)开发并维护,当前版本 v0.2.3。

💬 留言讨论