← 返回 Skills 市场
732
总下载
0
收藏
1
当前安装
8
版本数
在 OpenClaw 中安装
/install spoticlaw
功能描述
Spotify Web API client for Nyx agents. Use when interacting with Spotify: search, playback, playlists, library, tracks, artists, albums, shows, podcasts. Req...
安全使用建议
This skill appears to do what it says: a Spotify client that needs your Spotify app credentials and a token cache. Before installing: (1) If the agent runs on a remote or shared machine, avoid putting SPOTIFY_CLIENT_SECRET into the agent environment unless you accept that the agent can refresh tokens autonomously; instead run auth locally and copy the .spotify_cache manually. (2) Keep the skill folder permissions restrictive so the token and any .env containing secrets aren't accessible to other users/processes. (3) Review the included auth.py and spoticlaw.py if you have additional operational policies (they only contact Spotify endpoints). (4) If you do not want auto-refresh, do not provide SPOTIFY_CLIENT_SECRET on the agent and re-run auth locally when tokens expire. Finally, run this skill in an environment you control (or a least-privilege container) if you are concerned about storing client secrets or long-lived tokens on the agent.
功能分析
Type: OpenClaw Skill
Name: spoticlaw
Version: 1.0.7
The OpenClaw AgentSkills skill bundle 'spoticlaw' is a legitimate Spotify Web API client. Code analysis reveals standard OAuth 2.0 token management, secure handling of credentials (read from .env, token saved to .spotify_cache), and all network communications directed to official Spotify API endpoints. The `SKILL.md` documentation explicitly states that tokens do not pass through the AI model and requires manual copying, reinforcing a secure design. There is no evidence of data exfiltration, unauthorized remote execution, persistence mechanisms, or prompt injection attempts against the AI agent.
能力评估
Purpose & Capability
Name/description match the code and instructions: the package implements Spotify Web API calls and OAuth token management. Required env vars (SPOTIFY_CLIENT_ID, SPOTIFY_CLIENT_SECRET, SPOTIFY_REDIRECT_URI) and the .spotify_cache file are appropriate and expected for OAuth-based Spotify access.
Instruction Scope
SKILL.md and auth.py keep network calls strictly to Spotify (accounts.spotify.com and api.spotify.com). Instructions explicitly require manual copying of the .spotify_cache token file to the agent and state 'Tokens never pass through the AI model.' Note: to enable automatic refresh the agent must have the app credentials (client secret) available, which the docs disclose — this is a deliberate tradeoff but increases sensitive data stored on the agent.
Install Mechanism
No install spec; dependencies are standard (requests, python-dotenv) mentioned in requirements.txt and SKILL.md. There are no downloads from untrusted hosts or archive extraction. The code is shipped with the skill.
Credentials
Requested env vars are proportional to the stated purpose. However SPOTIFY_CLIENT_SECRET is sensitive — granting it to the agent enables automatic token refresh and therefore longer-lived API access from that machine. The code also loads a .env file if present (._env_path) and accepts SPOTIFY_CACHE_PATH, which are reasonable but mean secrets can live in files in the skill directory if the operator places them there.
Persistence & Privilege
always is false and the skill does not request system-level persistence or modify other skills. The skill reads/writes only its own .spotify_cache file and optional .env; it does not change global agent configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spoticlaw - 安装完成后，直接呼叫该 Skill 的名称或使用
/spoticlaw触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
- Documentation updated in SKILL.md for greater clarity and minor formatting improvements.
- No functional or code changes; this release is documentation-only.
v1.0.6
- Updated SKILL.md metadata: added a top-level homepage field and revised metadata structure for improved clarity and third-party tool compatibility.
- Minor changes to metadata keys: updated from "openclaw" to "clawdbot" and adjusted requirement specification format.
- No changes to code or main documentation content; documentation remains otherwise unchanged.
v1.0.5
- Updated the skill description to clarify that environment variables and a local .spotify_cache token file are required.
- No changes to functionality or code; documentation only.
v1.0.4
- Removed implementation plan documentation and several sample/test data files.
- No changes to user-facing functionality or APIs.
- Package is cleaner and has fewer data artifacts in the repository.
v1.0.3
Spoticlaw 1.0.3
- Added `IMPLEMENTATION_PLAN_MEMORY.md` and new raw data JSON files for Discogs, Modest Mouse, and MusicBrainz.
- Updated SKILL.md to clarify required environment variables, the `.spotify_cache` file, and explicit agent authentication/refresh behavior.
- Expanded skill metadata in SKILL.md with requirements and security notes.
- No core API changes; documentation and configuration details improved for end users and agent integrators.
v1.0.2
- Updated documentation in README.md for clarity and usage instructions.
- Removed obsolete install.sh script.
v1.0.1
- Added clarification in the Playlists section that each item in playlist tracks uses the 'item' key (not 'track'), and playlists can contain episodes (podcasts), not just tracks.
- No other content or functionality changes. Documentation improved for accuracy and user clarity.
v1.0.0
Initial release of spoticlaw — a lightweight Spotify Web API client for Nyx agents.
- Provides direct HTTP client for Spotify: no Spotipy dependency required.
- Supports searching, playback control, playlist and library management, as well as access to tracks, artists, albums, shows, podcasts, and user data.
- Local-only authentication flow keeps tokens off the AI and agent auto-refreshes access tokens as needed.
- Modular primitives for each Spotify operation (e.g., search, player, playlists, library).
- Includes documentation, quick start, common workflows, and setup instructions.
元数据
常见问题
SpotiClaw 是什么？
Spotify Web API client for Nyx agents. Use when interacting with Spotify: search, playback, playlists, library, tracks, artists, albums, shows, podcasts. Req... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 732 次。
如何安装 SpotiClaw？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spoticlaw」即可一键安装，无需额外配置。
SpotiClaw 是免费的吗？
是的，SpotiClaw 完全免费（开源免费），可自由下载、安装和使用。
SpotiClaw 支持哪些平台？
SpotiClaw 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SpotiClaw？
由 ledzgio（@ledzgio）开发并维护，当前版本 v1.0.7。
推荐 Skills