← 返回 Skills 市场
spotify-download
作者
Wang Zesong
· GitHub ↗
· v1.0.0
· MIT-0
126
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install spotify-download
功能描述
Download MP3s from Spotify playlists by fetching metadata, searching YouTube for tracks, and converting audio using ffmpeg with optional Spotify API credenti...
安全使用建议
This skill's runtime instructions align with its purpose, but the registry metadata omits key requirements and it directs you to install third-party packages and a GitHub repo. Before installing or running: 1) Confirm the source: inspect the referenced GitHub repo (https://github.com/zesong/spotify-download.git) and the PyPI package code to ensure no unexpected behavior. 2) Install supporting binaries (ffmpeg, yt-dlp) from trusted package managers (Homebrew, apt, Chocolatey or official project sites). 3) Avoid supplying your primary Spotify credentials unless necessary; use a disposable app/client if possible and revoke it after use. 4) Be aware of legal/terms-of-service issues when downloading copyrighted music—this may be prohibited in your jurisdiction or by service terms. 5) Ask the publisher to update registry metadata to declare required binaries and optional env vars so the skill's footprint is clear. Additional evidence (packaged code, a verified homepage, or a trustworthy publisher) would raise confidence.
功能分析
Type: OpenClaw Skill
Name: spotify-download
Version: 1.0.0
The skill bundle consists of documentation (SKILL.md) and metadata for a Spotify playlist downloader. It describes a standard workflow using legitimate tools like ffmpeg and yt-dlp to fetch metadata and download audio. No executable code was provided for analysis, and the instructions contain no evidence of prompt injection, data exfiltration, or malicious intent.
能力评估
Purpose & Capability
The SKILL.md behavior (fetch Spotify metadata, search YouTube, download/convert with yt-dlp and ffmpeg) is coherent with the name/description. However, the registry metadata declares no required binaries or env vars while the instructions clearly require Python 3.10+, ffmpeg, and yt-dlp and reference optional Spotify credentials. The discrepancy between metadata and SKILL.md is noteworthy.
Instruction Scope
Instructions stay within the stated task: fetch playlist metadata (embed or API), search YouTube, download audio, and convert to MP3. They do not direct the agent to read unrelated system files or exfiltrate arbitrary data. They do reference setting SPOTIFY_CLIENT_ID/SECRET as environment variables (optional) which are relevant to the task but were not declared in the registry metadata.
Install Mechanism
There is no install spec in the registry, but SKILL.md instructs users to install a third-party 'spotify-download' package via pip/pipx or clone a GitHub repo (https://github.com/zesong/spotify-download.git). It also references 'uvx' as an invocation method. Installing packages from PyPI or cloning arbitrary GitHub repos executes external code and is higher risk; the skill metadata should have declared these dependencies or an install mechanism to allow review. The lack of an official homepage and unknown owner increases the need for caution.
Credentials
The only credentials mentioned are optional Spotify Client ID/Secret, which are proportional to the stated need for accessing private playlists or improving metadata. However, the registry did not list these env vars as optional fields even though SKILL.md instructs how to set them. No other credentials are requested, which is appropriate. Users should avoid supplying long-lived production credentials unless necessary.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent platform privileges. It does not ask to modify other skills or system-wide configs. Autonomous model invocation is enabled by default but is not, on its own, a red flag here.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spotify-download - 安装完成后，直接呼叫该 Skill 的名称或使用
/spotify-download触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of spotify-download.
- Download MP3 files from Spotify playlists, including public and private playlists (with credentials).
- Supports multiple installation options: uvx, pip, pipx, or local development.
- Downloads to a specified directory, saving both audio files and playlist metadata.
- Uses ffmpeg and yt-dlp for audio extraction and conversion.
- Handles concurrent downloads and includes advanced options for output, speed, and re-downloads.
- Requires no Spotify credentials for public playlists; supports credential use for private or more accurate data.
元数据
常见问题
spotify-download 是什么？
Download MP3s from Spotify playlists by fetching metadata, searching YouTube for tracks, and converting audio using ffmpeg with optional Spotify API credenti... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 126 次。
如何安装 spotify-download？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spotify-download」即可一键安装，无需额外配置。
spotify-download 是免费的吗？
是的，spotify-download 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
spotify-download 支持哪些平台？
spotify-download 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 spotify-download？
由 Wang Zesong（@wgzesg）开发并维护，当前版本 v1.0.0。
推荐 Skills