← 返回 Skills 市场
jrojas537

Discogs Cli

作者 jrojas537 · GitHub ↗ · v1.3.1
cross-platform ⚠ suspicious
835
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install discogs-cli
功能描述
An OpenClaw skill to manage a user's vinyl record collection on Discogs.
使用说明 (SKILL.md)

Discogs Collection Manager Skill for OpenClaw

This skill provides a command-line interface to interact with a user's record collection on Discogs.com. It is designed specifically for use within the OpenClaw assistant and uses a subcommand structure similar to git or gog.

Prerequisites

This skill is a Go program and requires the Go toolchain to be installed.

Installation (Debian/Ubuntu): sudo apt-get update && sudo apt-get install -y golang-go

One-Time Setup

Before first use, you must run the included installer script. This will compile the Go binary and place it in a predictable location within the skill's directory.

  1. Run the installer:

    skills/discogs-cli/install.sh
    
  2. Configure Credentials: This command saves your Discogs token and username to a configuration file (~/.config/discogs-cli/config.yaml).

    skills/discogs-cli/bin/discogs-cli config set -u "YourUsername" -t "YourSecretToken"
    

Usage

All commands must be prefixed with the full path to the binary.

Fetch Album Art

Downloads the album art for a given release and displays it in the chat.

skills/discogs-cli/bin/discogs-cli release art \x3Crelease_id>

List Collection Folders

Shows all folders and their record counts.

skills/discogs-cli/bin/discogs-cli collection list-folders

List Releases in a Folder

Shows all records within a specific folder. The output is a formatted table.

# List all releases from the "All" folder (default)
skills/discogs-cli/bin/discogs-cli collection list

# List all releases from a specific folder by ID
skills/discogs-cli/bin/discogs-cli collection list --folder 8815833

Search the Discogs Database

Search for releases, artists, or labels.

# Search for a release (default type)
skills/discogs-cli/bin/discogs-cli search "Daft Punk - Discovery"

# Search for an artist
skills/discogs-cli/bin/discogs-cli search --type artist "Aphex Twin"

Manage Your Wantlist

Work with your Discogs wantlist.

List Your Wantlist

Displays all items in your wantlist.

skills/discogs-cli/bin/discogs-cli wantlist list

Add to Your Wantlist

Adds a release to your wantlist by its ID.

skills/discogs-cli/bin/discogs-cli wantlist add 12345

Remove from Your Wantlist

Removes a release from your wantlist by its ID.

skills/discogs-cli/bin/discogs-cli wantlist remove 12345

Caching and Valuation Commands

These commands rely on a local cache for performance. You must run sync first to populate the cache.

Sync Collection Details (Slow)

Fetches detailed data for every item in the collection and builds a local cache. This command is slow and should be run in the background. Inform the user that this will take time.

skills/discogs-cli/bin/discogs-cli collection sync

Get Collection Value (Fast)

Reads the local cache to provide the estimated market value for each item and the total collection. This command is fast. If it fails, the cache is likely missing, and you need to run the sync command.

skills/discogs-cli/bin/discogs-cli collection value

Get Single Release Details (Fast)

Provides a detailed view of a single release, including tracklist.

skills/discogs-cli/bin/discogs-cli collection get 35198584
安全使用建议
This skill appears to implement a real Discogs CLI and uses local compilation (go build). Before installing: 1) Be aware you must provide your Discogs username and personal access token — the tool stores them in a local config file (~/.config/discogs-cli/config.yaml) unless you supply them via environment variables. 2) The code writes album art to a hard-coded path: '/home/Ev05bot/.openclaw/workspace/art_cache/discogs'. That looks like a developer-specific path and may be unintended or problematic in your environment; ask the author to change it to a configurable or user-specific path (for example, use os.UserCacheDir() or relative skill workspace). 3) The README suggests optionally moving the binary to /usr/local/bin (requires sudo); only do that if you trust the code. 4) If you run this on a shared or hosted agent, audit file write locations and ensure the tool cannot access or overwrite sensitive files. If the hard-coded path or the AutomaticEnv behavior is unexplained by the author, treat the package cautiously or request a fix before use.
功能分析
Type: OpenClaw Skill Name: discogs-cli Version: 1.3.1 The skill is classified as suspicious due to a critical vulnerability related to insecure credential storage. The `scripts/cmd/root.go` file uses `os.MkdirAll(configPath, os.ModePerm)` to create the `~/.config/discogs-cli` directory with `0777` permissions, making it world-writable and potentially world-readable. This could allow other local users on the system to access the `config.yaml` file containing the Discogs personal access token and username, leading to local information disclosure. While there is no evidence of intentional malicious behavior like data exfiltration to external endpoints or prompt injection against the agent, this severe vulnerability warrants a 'suspicious' classification.
能力评估
Purpose & Capability
Name/description align with the code and requested binary (Go). The code implements Discogs collection, search, wantlist, caching and art download functionality which matches the skill description.
Instruction Scope
The runtime instructions are straightforward (build with Go, run installer, run `config set` to store token/username), but the code writes album art to a hard-coded absolute path: '/home/Ev05bot/.openclaw/workspace/art_cache/discogs'. That is unexpected for a general-purpose skill (should use the invoking user's home or a relative/workspace path) and looks like a leftover or targeted path. This could fail or, worse, attempt to write into another user's area in a multi-user environment.
Install Mechanism
No remote installers are used in the registry metadata. The provided install.sh compiles local Go source into a binary (go build). Dependencies are typical Go modules from public repos. No downloads from obscure hosts or extract-from-URL steps are present.
Credentials
The skill does not declare required environment variables in metadata (none listed), and SKILL.md instructs saving Discogs username/token to a local config file — which is reasonable. However, the code calls viper.AutomaticEnv(), so configuration keys (like 'token'/'username') can also be picked up from environment variables. This behavior is not documented in SKILL.md and could cause unexpected reads from env vars if present. No unrelated cloud credentials or broad secrets are requested.
Persistence & Privilege
The skill does not request always:true or any elevated/persistent platform privileges. It only creates its own config and cache files under the user's directories (aside from the hard-coded path noted above). It does not modify other skills or system-wide agent configs.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install discogs-cli
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /discogs-cli 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.3.1
- Bumped version number in package.json to 1.3.1. - No functional or documentation changes in this release.
v1.3.0
- Refactored the Discogs API client: moved logic from scripts/cmd/ to discogs/client.go for better organization. - Removed obsolete files: scripts/cmd/client.go, scripts/cmd/types.go, and scripts/cmd/wantlist_client.go. - Updated wantlist command implementation to use new client structure. - Updated dependencies in package.json.
v1.2.1
- Added install.sh script for simplified installation and setup. - Updated documentation to direct users to run install.sh and use the skill-specific binary path for all commands. - Clarified usage instructions for improved integration within the OpenClaw assistant. - Minor description and metadata adjustments for accuracy and clarity.
v1.2.0
feat(release): Add 'art' command to fetch album art and improve file handling.
v1.1.0
Add search and wantlist commands
元数据
Slug discogs-cli
版本 1.3.1
许可证
累计安装 0
当前安装数 0
历史版本数 5
常见问题

Discogs Cli 是什么?

An OpenClaw skill to manage a user's vinyl record collection on Discogs. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 835 次。

如何安装 Discogs Cli?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install discogs-cli」即可一键安装,无需额外配置。

Discogs Cli 是免费的吗?

是的,Discogs Cli 完全免费(开源免费),可自由下载、安装和使用。

Discogs Cli 支持哪些平台?

Discogs Cli 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Discogs Cli?

由 jrojas537(@jrojas537)开发并维护,当前版本 v1.3.1。

💬 留言讨论