Music Analysis

Analyze music/audio files locally without external APIs. Extract tempo, pocket/groove feel, pulse stability, swing proxy, section/repetition structure, key c...

This skill appears to implement the advertised local audio analysis (librosa-based features, temporal analysis, optional Whisper transcription). However: 1) Inspect setup.sh before running — it will create a virtualenv, pip install packages, download a ~1.5GB Whisper model from huggingface.co, and append aliases to ~/.zshrc; the script uses a hard-coded SKILL_DIR (/Users/huang/...), so it will likely fail or write unexpected files on your machine unless you edit it. 2) If you don't want the aliases or files in your home, do not run setup.sh as-is; instead create a venv manually, pip install requirements.txt, and run the scripts from a controlled directory. 3) The tool invokes ffmpeg/ffprobe and whisper-cli (optional); ensure you trust these binaries and verify their provenance. 4) The skill does not request credentials, nor does it clearly exfiltrate data, but it does perform network downloads during setup (model binary) and suggests using yt-dlp for audio sourcing. Recommendation: treat the package as useful but potentially intrusive — run it in a dedicated environment or container, review and adapt setup.sh (remove or fix hard-coded paths and ~/.zshrc modifications), and verify external downloads before executing them.

Type: OpenClaw Skill Name: music-analysis-84 Version: 1.0.0 The music-analysis skill bundle provides a comprehensive suite for local audio analysis, including groove detection, structural mapping, and lyric transcription using Whisper. The code uses standard libraries (librosa, numpy) and external utilities (ffmpeg, whisper-cli) to process audio files as described. While the setup.sh script contains hardcoded paths specific to a developer's environment (/Users/huang) and modifies the user's shell configuration (~/.zshrc) to add convenience aliases, these actions are transparently aligned with the tool's stated purpose and do not exhibit malicious intent such as data exfiltration or unauthorized remote control.