← 返回 Skills 市场
176
总下载
0
收藏
0
当前安装
14
版本数
在 OpenClaw 中安装
/install partykeys-midi
功能描述
Control PartyKeys MIDI keyboard via WebSocket - connect device, light up keys with 12 colors, listen to playing, play sequences, and follow mode for music te...
安全使用建议
This skill generally does what it says: it runs a local Python WebSocket MCP server and can control a PartyKeys keyboard via BLE. Before installing, consider the following: 1) Backup ~/.openclaw and inspect your openclaw.json/mcp.json — setup.sh may overwrite mcp.json if jq is not present. 2) The MCP server listens on 0.0.0.0:18790 with no authentication; anyone who can reach that port can send commands. Restrict access via firewall or bind to localhost / use a TLS reverse proxy with auth if exposing remotely. 3) The BLE client uses the Bleak library but Bleak is not listed in requirements.txt — you may need to install it manually; review dependencies before pip install. 4) Run the setup in a controlled environment (local machine or trusted network) and review the Python source files (mcp_server.py, script_ble_client.py) for any extra behavior before giving it network access. If you need help hardening deployment (binding to localhost, adding auth, or sandboxing), do that first.
功能分析
Type: OpenClaw Skill
Name: partykeys-midi
Version: 1.0.12
The skill facilitates MIDI keyboard control by establishing a WebSocket server on port 18790. It contains potentially risky behaviors: mcp_server.py executes a shell command via subprocess.run(shell=True) to determine the local IP and binds the WebSocket server to all network interfaces (0.0.0.0). Additionally, the setup.sh script modifies the user's OpenClaw configuration files (~/.openclaw/mcp.json and openclaw.json). While these actions appear intended for legitimate functionality such as device discovery and registration, they represent an increased attack surface and use risky execution patterns. No evidence of intentional malicious intent or data exfiltration was observed.
能力评估
Purpose & Capability
Name/description, SKILL.md, and included Python code all align: this package runs a WebSocket-based MCP server and optionally connects to a MIDI keyboard via BLE. Requested binary (python3) and Python deps are consistent. Minor mismatch: script_ble_client.py uses the Bleak BLE library but the setup installs only 'mcp' and 'aiohttp' (Bleak is missing from server/requirements.txt), which looks like an implementation oversight rather than malicious intent.
Instruction Scope
SKILL.md and setup.sh direct the user/agent to run scripts/setup.sh which creates a venv, installs Python packages, registers an MCP server, and links the skill into ~/.openclaw. The runtime launches a WebSocket server bound to 0.0.0.0:18790 with no built-in authentication — anyone who can reach that port can send commands to connected clients. The skill also instructs use of mobile/web bridge modes that forward commands to BLE clients; these network/bridge behaviors increase attack surface and deserve caution.
Install Mechanism
No external downloads; setup.sh creates a local Python venv and pip-installs packages (mcp, aiohttp). That is low-risk in terms of remote code fetch, but setup.sh writes to user home (~/.openclaw), creates a symlink in ~/.openclaw/skills, and modifies/creates ~/.openclaw/mcp.json. If jq is missing the script will write a new mcp.json and may overwrite existing entries (script warns about this). These filesystem/config changes are expected for registering an MCP but can clobber existing configuration.
Credentials
No environment variables or credentials are requested. The declared requirement (python3) matches the code. No unrelated credentials or config paths are requested.
Persistence & Privilege
The installer intentionally registers a persistent MCP entry in ~/.openclaw and symlinks the skill into ~/.openclaw/skills, which grants the skill persistent presence in the user's OpenClaw environment (expected for a skill). The concern is that the script may overwrite mcp.json entries when jq is missing, and the server binds to 0.0.0.0 without authentication — combination of persistence + open network binding increases risk if deployed on an untrusted network.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install partykeys-midi - 安装完成后,直接呼叫该 Skill 的名称或使用
/partykeys-midi触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.12
- Added new API tools: music_set_mode, music_set_octave, music_set_bpm, music_set_beat_type, music_chord_light, music_set_skin, music_query_device, music_query_version.
- Updated SKILL.md with details and usage instructions for the new tools.
- Improved documentation to cover expanded device control and configuration options.
v1.0.11
No changes detected in this version.
- No file or documentation changes were made in version 1.0.11.
- Functionality and usage remain identical to the previous release.
v1.0.10
- Improved code style and minor refactoring in server/mcp_server.py.
- No changes to features or user interface.
v1.0.9
- Removed the embedded web-gateway (index.html, package.json, server.js) from the repository.
- Now relies on external or standalone bridge web interface for browser connections.
- No changes to user-facing features or core API.
v1.0.8
- Changed default WebSocket port from 9528 to 18790 throughout the documentation.
- Updated all connection instructions and examples to use the new port (18790).
- No functional or API changes, only documentation updated.
v1.0.7
- Updated browser connection instructions: changed the recommended web page from `web-gateway/standalone.html` to `partykeys-bridge-web/standalone.html`.
- No changes to API or feature set; documentation improvements only.
v1.0.6
- Simplified architecture: now only the WebSocket server (port 9528) is started (Web Gateway removed).
- Expanded key lighting: supports 12 distinct colors for keys; updated usage instructions for colors.
- Updated device connection flows and clarified user instructions for both browser and mobile connections.
- Added detailed 12-color table and improved usage examples for lighting keys.
- Updated documentation to reflect the new recommended parameters and deprecate older usage (e.g., single color).
- Clarified safe usage contexts for browser and mobile modes.
v1.0.5
- Added improvements to server/mcp_server.py and web-gateway/index.html.
- Minor update; no user-facing behavior changes described.
v1.0.4
**Unified device connection: now both browser and mobile app connect via a single WebSocket protocol (port 9528).**
- Simplified architecture: merged connection logic for browser and mobile app; both now use the same WebSocket communication protocol.
- Removed old gateway and client scripts; updated to rely on one unified gateway for both types of devices.
- Installation and usage steps streamlined in documentation; connection options are clearer for all platforms.
- All tool APIs and example usage updated to match the unified architecture.
- Documentation updated to reflect the new connection flow and supported environments.
v1.1.0
Add mobile bridge mode, connection mode selection guide, app download instructions
v1.0.3
Fix: default connect mode changed from web to script (no browser needed)
v1.0.2
Fix: use mcp.json directly, auto-cleanup stale mcp key from openclaw.json, remove dependency on openclaw mcp CLI
v1.0.1
Fix: MCP config now writes to ~/.openclaw/mcp.json instead of openclaw.json
v1.0.0
Initial release of PartyKeys MIDI keyboard control via BLE.
- Connect, disconnect, and control a PartyKeys (音乐密码) MIDI keyboard over Bluetooth from macOS/Linux.
- Light up specific keys with configurable colors and brightness.
- Listen for key presses, including timeout and continuous/single note modes.
- Play sequences of notes and use "follow mode" for guided teaching with interactive prompts.
- Supports script (direct BLE, recommended) and web (browser-based) connection modes.
- Includes setup instructions, troubleshooting, and sample usage flows.
元数据
常见问题
Partykeys Midi 是什么?
Control PartyKeys MIDI keyboard via WebSocket - connect device, light up keys with 12 colors, listen to playing, play sequences, and follow mode for music te... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 176 次。
如何安装 Partykeys Midi?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install partykeys-midi」即可一键安装,无需额外配置。
Partykeys Midi 是免费的吗?
是的,Partykeys Midi 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Partykeys Midi 支持哪些平台?
Partykeys Midi 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin, linux)。
谁开发了 Partykeys Midi?
由 allen4z(@allen4z)开发并维护,当前版本 v1.0.12。
推荐 Skills