← 返回 Skills 市场
Spotify Player
作者
Peter Steinberger
· GitHub ↗
· v1.0.0
28126
总下载
55
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install spotify-player
功能描述
Terminal Spotify playback/search via spogo (preferred) or spotify_player.
安全使用建议
Review this skill before installing. Only run the Chrome cookie import if you trust the installed spogo binary and understand that browser cookies can act like account credentials. Prefer a safer OAuth or device-login flow where available, and verify the tool source before granting it browser profile access.
功能分析
Type: OpenClaw Skill
Name: spotify-player
Version: 1.0.0
The skill bundle is classified as suspicious due to the `spogo auth import --browser chrome` command specified in `SKILL.md`. This command accesses sensitive browser cookies for authentication, which, while plausibly needed for the stated purpose of a Spotify player, represents a high-risk capability that could be abused. There is no clear evidence of intentional malicious behavior or prompt injection against the agent for data exfiltration or unauthorized actions within the provided files, but the direct access to browser data warrants a 'suspicious' classification.
能力评估
Credentials
Playback and search commands are proportionate to the stated purpose, but granting a local external binary access to Chrome cookie storage is broader and more sensitive than ordinary Spotify playback control unless the user clearly understands and approves that trust boundary.
Install Mechanism
The skill has no bundled executable code, but metadata installs spogo from the third-party Homebrew tap `steipete/tap` without a pinned version or independent integrity information. This is more concerning because the installed binary is later used for cookie import.
Instruction Scope
The runtime instructions tell users to run `spogo auth import --browser chrome` without explaining that browser cookies are sensitive credentials, what profile or domains are accessed, where imported material is stored, or requiring explicit user control at the moment of access.
Persistence & Privilege
No system persistence, privilege escalation, services, hooks, or background workers are present in the artifact. The skill notes spotify_player configuration under `~/.config/spotify-player`, which is ordinary local app configuration.
Purpose & Capability
The skill purpose is terminal Spotify playback and search, and the documented spogo/spotify_player commands fit that purpose. Authentication is expected for Spotify control, but browser cookie import crosses into sensitive session data.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spotify-player - 安装完成后，直接呼叫该 Skill 的名称或使用
/spotify-player触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
元数据
常见问题
Spotify Player 是什么？
Terminal Spotify playback/search via spogo (preferred) or spotify_player. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 28126 次。
如何安装 Spotify Player？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spotify-player」即可一键安装，无需额外配置。
Spotify Player 是免费的吗？
是的，Spotify Player 完全免费（开源免费），可自由下载、安装和使用。
Spotify Player 支持哪些平台？
Spotify Player 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Spotify Player？
由 Peter Steinberger（@steipete）开发并维护，当前版本 v1.0.0。
推荐 Skills