← 返回 Skills 市场
78
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install spotify-player-hardened
功能描述
Terminal Spotify playback/search via spogo (preferred) or spotify_player.
安全使用建议
This skill appears to do what it says: control Spotify from the terminal via spogo or spotify_player. Before installing or running it: 1) Confirm you have Spotify Premium if you need playback/Connect features. 2) Inspect the Homebrew formula and the tap (steipete/tap) for spogo before adding it — third‑party taps can contain arbitrary install scripts. 3) Never allow the agent to run `spogo auth import` or to read ~/.config/spotify-player without your explicit approval — that command imports browser cookies and can expose session tokens. 4) Follow the embedded guardrails: require confirmation for any destructive action and avoid copying credentials into chat. If you want maximum safety, install and run the CLI yourself and only give the agent permission to run strictly scoped commands after you review them.
功能分析
Type: OpenClaw Skill
Name: spotify-player-hardened
Version: 1.0.0
The skill bundle provides Spotify playback and search capabilities using legitimate CLI tools (spogo and spotify_player). It is explicitly designed with a 'hardened' security posture, including defensive instructions in SKILL.md that act as guardrails to prevent the AI agent from leaking credentials, accessing sensitive config files without consent, or exfiltrating data. The SAFETY.md file provides a comprehensive safety evaluation and rationale for these protections, and no evidence of malicious intent or obfuscation was found.
能力标签
能力评估
Purpose & Capability
Name/description (terminal Spotify playback/search) match the declared runtime needs: it requires either the spogo or spotify_player CLI and offers brew install specs for those packages. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md stays within the stated purpose (search/playback, device selection, status). However, it explicitly recommends running `spogo auth import --browser chrome`, which reads browser session cookies — a sensitive local operation. The file also includes guardrails that require explicit confirmation before auth/import or reading config files; these guardrails mitigate risk but must be enforced at runtime.
Install Mechanism
Installation is via Homebrew formulas (lower risk than arbitrary URL downloads). One formula (spogo) is from a third‑party tap (steipete/tap) rather than Homebrew core; third‑party taps can install arbitrary code, so verify the tap/formula before installing. The two brew entries duplicate the same id field (minor metadata inconsistency).
Credentials
The skill requests no environment variables or external credentials, which is appropriate. It documents a local config path (~/.config/spotify-player) and mentions setting a user client_id for Connect — that is expected and proportional to the feature set.
Persistence & Privilege
The skill is not marked always:true and does not request elevated or persistent system presence. disable-model-invocation is false (normal). The SKILL.md explicitly warns not to read/modify config without user consent, which limits privileged behavior.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install spotify-player-hardened - 安装完成后，直接呼叫该 Skill 的名称或使用
/spotify-player-hardened触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of spotify-player-hardened – secure terminal Spotify control via spogo (preferred) or spotify_player.
- Spotify playback and search from the terminal, with a fallback to spotify_player if spogo is unavailable.
- Requires Spotify Premium and either spogo or spotify_player to be installed.
- Enhanced security guardrails: confirmation required before destructive or credential-related actions, prevention of sensitive data exposure, and restrictions on automated or networked command usage.
- Quick-start and common command references for both spogo and spotify_player.
- Detailed notes on setup, configuration, and TUI usage tips.
元数据
常见问题
Spotify Player Hardened 是什么？
Terminal Spotify playback/search via spogo (preferred) or spotify_player. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 78 次。
如何安装 Spotify Player Hardened？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install spotify-player-hardened」即可一键安装，无需额外配置。
Spotify Player Hardened 是免费的吗？
是的，Spotify Player Hardened 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Spotify Player Hardened 支持哪些平台？
Spotify Player Hardened 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Spotify Player Hardened？
由 Faberlens（@snazar-faberlens）开发并维护，当前版本 v1.0.0。
推荐 Skills