← 返回 Skills 市场
SoundCloud Watcher
作者
Akilles Admin
· GitHub ↗
· v2.4.0
· MIT-0
750
总下载
2
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install soundcloud-watcher
功能描述
Monitor your SoundCloud account, track artist releases, and get notified about new followers and likes.
安全使用建议
This plugin appears to do what it says: monitor your SoundCloud account using the SoundCloud API and store plugin state under ~/.openclaw. Before installing: 1) Confirm the repository and package authors (README/package.json point to a GitHub repo and npm package) and prefer installing from the official source (git or npm) rather than unknown mirrors. 2) Be aware you must provide your SoundCloud Client ID/Client Secret and username; these are stored under ~/.openclaw/secrets/soundcloud.env and the plugin may also persist an access token in the same file. Ensure that file has restrictive filesystem permissions (e.g., 600). 3) Verify the registry metadata mismatch (the top-level metadata in the listing omitted required env/config paths) — that likely indicates an oversight in the registry entry, not malicious intent, but you should confirm the package source before trusting secrets to it. 4) If you need higher assurance, review the full plugin code in the referenced GitHub repo and verify it only calls api.soundcloud.com and does not include any other network endpoints. 5) To remove, follow the README uninstall steps and delete the secrets/data files. If you want me to, I can (a) fetch and compare the referenced GitHub repo code against these files, or (b) search the rest of the truncated source for any networking endpoints beyond api.soundcloud.com.
功能分析
Type: OpenClaw Skill
Name: soundcloud-watcher
Version: 2.4.0
The SoundCloud Watcher plugin is a legitimate tool for monitoring account activity and artist releases. It follows standard OpenClaw patterns for credential management (using ~/.openclaw/secrets/soundcloud.env) and state persistence. The code in soundcloud_watcher.ts demonstrates high security awareness by implementing explicit sanitization of API-retrieved metadata (usernames, track titles) to prevent prompt injection against the agent. Network activity is strictly limited to official SoundCloud API endpoints (api.soundcloud.com and secure.soundcloud.com).
能力评估
Purpose & Capability
The plugin claims to monitor a SoundCloud account and the code implements that: it reads a local secrets file, calls the SoundCloud API, and stores tracking data under ~/.openclaw. However the registry metadata at the top of the report claimed 'no required env vars / config paths', while the included openclaw.plugin.json and SKILL.md require SOUNDCLOUD_CLIENT_ID, SOUNDCLOUD_CLIENT_SECRET, MY_USERNAME and specific ~/.openclaw paths — a metadata mismatch that should be clarified.
Instruction Scope
SKILL.md instructs the agent to install/enable the plugin, place SoundCloud credentials in ~/.openclaw/secrets/soundcloud.env, and run cron or command triggers. The runtime instructions and commands map to code handlers; there are no instructions to read unrelated system files or exfiltrate data outside the SoundCloud API. The plugin reads/writes only its own ~/.openclaw files (secrets, data, backoff state).
Install Mechanism
This is an instruction-only plugin in the registry (no install spec). The package includes TypeScript source files and package.json, but there is no external download-from-URL or unexpected installer. No high-risk install behavior (no URL shorteners, no archives being downloaded at runtime) is present in the provided files.
Credentials
The environment/secret requirements (SoundCloud client ID/secret and username) are appropriate and expected for a SoundCloud integration. The plugin also persists an access token to the same secrets file and stores state in ~/.openclaw/data; this is typical. However, the registry-level metadata claims no required env vars or config paths while the plugin manifest and SKILL.md clearly require them — this discrepancy is unexpected and merits confirmation before installing.
Persistence & Privilege
The plugin requests no elevated platform privileges (always: false) and does not attempt to modify other plugins' configs. It persists only its own state under ~/.openclaw and writes a saved access token to its secrets file, which is consistent with its function.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install soundcloud-watcher - 安装完成后，直接呼叫该 Skill 的名称或使用
/soundcloud-watcher触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.4.0
Sanitize user-controlled data in output to prevent prompt injection
v2.3.1
Migrate to SoundCloud OAuth 2.1, declare required env vars in registry metadata
v2.3.0
Migrate to SoundCloud OAuth 2.1 (secure.soundcloud.com/oauth/token with Basic auth)
v2.2.5
Declare required env vars and data paths in metadata, remove Telegram-specific wording
v2.2.3
- Updated cron job example in documentation to remove the explicit Telegram forwarding instruction.
- Documentation improvements in README.md and SKILL.md for clarity and updated usage instructions.
- No functional or code changes.
v2.2.2
- Updated dependencies in package.json for improved stability.
- Revised plugin metadata in openclaw.plugin.json.
- No user-facing feature changes.
v2.2.1
- Improved documentation with clearer setup instructions and command usage.
- Added detailed installation and configuration steps for easier onboarding.
- Enhanced command list with descriptions for all available actions.
- Included example for setting up automated checks via cron.
元数据
常见问题
SoundCloud Watcher 是什么？
Monitor your SoundCloud account, track artist releases, and get notified about new followers and likes. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 750 次。
如何安装 SoundCloud Watcher？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install soundcloud-watcher」即可一键安装，无需额外配置。
SoundCloud Watcher 是免费的吗？
是的，SoundCloud Watcher 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
SoundCloud Watcher 支持哪些平台？
SoundCloud Watcher 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SoundCloud Watcher？
由 Akilles Admin（@wlinds）开发并维护，当前版本 v2.4.0。
推荐 Skills