← 返回 Skills 市场
834
总下载
2
收藏
0
当前安装
8
版本数
在 OpenClaw 中安装
/install spotify-claw
功能描述
Full Spotify Premium control + music analysis. Playback: play/pause/next/prev/volume/shuffle/queue. Analysis: top tracks, top artists, liked songs, genre pro...
安全使用建议
Do not install or run this skill without verifying the missing pieces. Specifically: (1) confirm the repository/source actually provides ~/.openclaw/scripts/spotify.py and inspect its source code to ensure it only does the expected Spotify API and app-control actions, (2) verify the install steps (how the script gets installed) and prefer an explicit, packaged install procedure rather than ad hoc local scripts, (3) be aware this is macOS-specific (uses Keychain and likely AppleScript) — the registry did not declare an OS restriction, (4) only add your Spotify client_id/client_secret to Keychain after auditing the script so you know keys won't be exfiltrated, and (5) request the publisher add explicit install metadata, declare required credentials/OS, or bundle the script so you can review it. If you cannot verify the script/source, treat this skill as unsafe to use.
功能分析
Type: OpenClaw Skill
Name: spotify-claw
Version: 2.0.1
The skill bundle provides a comprehensive interface for Spotify control and music analysis using the legitimate 'spotipy' library. It follows security best practices by instructing users to store credentials in the macOS Keychain rather than plain text. The instructions in SKILL.md are functional and aimed at ensuring the AI agent executes the necessary Python commands correctly, with no evidence of malicious prompt injection, data exfiltration, or unauthorized access.
能力评估
Purpose & Capability
The SKILL.md describes a local script (~/.openclaw/scripts/spotify.py) that provides full Spotify control and uses macOS Keychain for credentials, but the registry bundle contains no code and no declared OS restriction. The described capabilities (auto-launching Spotify, keychain access, local script execution) are plausible for a Spotify helper, but the skill does not include the script or clearly declare that macOS and a local script are required.
Instruction Scope
Runtime instructions explicitly demand executing a local script path and adding client_id/client_secret to the macOS Keychain. The skill tells the agent to 'ALWAYS run python3 ~/.openclaw/scripts/spotify.py [cmd]' which gives the agent permission to execute arbitrary local code that is not supplied with the skill. The instructions also direct storing secrets with the macOS security CLI — credential handling is present but not declared in the registry metadata.
Install Mechanism
The registry lists no install spec and there are no code files, yet the SKILL.md metadata includes an install entry for the pip package 'spotipy'. Spotipy is a reasonable dependency, but it does not provide the referenced local script. This mismatch (no install, no code, but instructions that require a script) is inconsistent and increases risk because the expected script could come from an unverified external source or require manual installation steps not documented in the registry.
Credentials
The skill requires Spotify client_id/client_secret stored in macOS Keychain (instructions show using 'security add-generic-password'), but the registry metadata lists no required credentials or primaryEnv. Asking for client credentials is proportionate to the task, but the absence of declared credential requirements and OS restriction is a misalignment and could lead to unexpected secret storage/exposure if the script's behavior is not audited.
Persistence & Privilege
Although always:false and no autonomous elevation flags are set, the instruction to always execute a local script (which the skill does not ship) effectively grants the agent permission to run arbitrary local code whenever invoked. That creates a potentially large blast radius if the referenced script is malicious or replaced — a persistent implicit dependency without provenance is risky.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spotify-claw - 安装完成后，直接呼叫该 Skill 的名称或使用
/spotify-claw触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.1
spotify-claw 2.0.1
- Major SKILL.md rewrite with better structure, concise English instructions, and improved formatting
- Clarified setup, playback, analysis, discovery, and playlist builder commands
- New metadata: homepage link, emoji, install dependencies for OpenClaw
- Updated triggers, clearer agent usage tips, and critical notes about blocked Spotify APIs
- Now suitable and readable for all users, not just the original author
v2.0.0
Major v2.0.0 update: Expanded Spotify Premium control, music analysis, and discovery with improved workflow.
- Adds full playback control with auto-launch if Spotify is closed
- Introduces detailed music taste and genre analysis
- Enables music discovery and playlist creation without the Recommendations API
- Enhanced commands for viewing top tracks, artists, liked songs, and genre breakdowns
- Smarter playlist builder and filters (e.g., liked-by-artist)
- Credentials securely managed via macOS Keychain
v1.4.0
spotify-claw 1.4.0
- Major SKILL.md rewrite: modernized, restructured, and clarified documentation.
- Improved setup instructions and added homepage link.
- All command syntax examples condensed, grouped, and updated for clarity.
- Added metadata for install hints and emoji.
- Noted API limitations (blocked endpoints, workarounds explained).
- Agent tips and best practice reminders added for OpenClaw integration.
v1.3.0
spotify-claw 1.3.0
- Added a dedicated "Setup" section with credential storage and initial auth instructions.
- Removed hardcoded user/account details for improved privacy and generalization.
- Clarified which Spotify API features are blocked vs. available for new apps.
- No functional/command changes; documentation refresh and privacy improvements only.
v1.2.0
**Major restructure and simplification of skill files, with improved documentation.**
- Updated and greatly expanded SKILL.md with detailed usage instructions, examples, algorithms, and multi-language triggers (English/Russian).
- Skill metadata simplified and clarified; now ensures it always runs as a tool.
- Removed redundant documentation and helper files: README.md and requirements/scripts sources are gone.
- All information now consolidated into a single, thorough SKILL.md for easier onboarding and use.
- No changes to core functionality or commands—this release is fully documentation and packaging focused.
v1.1.0
All Russian text translated to English (comments, docstrings, print output). Triggers in SKILL.md updated to English.
v1.0.1
Version 1.0.1
- Updated README.md for clearer setup instructions and improved formatting.
- No functional changes to code; documentation only.
v1.0.0
Initial release—full Spotify Premium control and advanced music analysis with smart discovery features.
- Playback: Control Spotify (play, pause, next, previous, volume, shuffle, queue, auto-launch if app is closed).
- Analysis: Access top tracks/artists, playback history, liked songs, genre profile, and taste breakdown.
- Discovery: Find similar artists and expand your music library—no reliance on Spotify's Recommendations API.
- Playlist builder: Create and manage playlists (e.g., make-playlist, liked-by-artist, discover, add tracks).
- Secure credentials (macOS Keychain) and Russian-language command triggers supported.
- Includes full usage documentation via SKILL.md.
元数据
常见问题
Spotify 是什么？
Full Spotify Premium control + music analysis. Playback: play/pause/next/prev/volume/shuffle/queue. Analysis: top tracks, top artists, liked songs, genre pro... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 834 次。
如何安装 Spotify？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spotify-claw」即可一键安装，无需额外配置。
Spotify 是免费的吗？
是的，Spotify 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Spotify 支持哪些平台？
Spotify 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Spotify？
由 Mixx（@mixx85）开发并维护，当前版本 v2.0.1。
推荐 Skills