← 返回 Skills 市场
142
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install xiaozhi-mcp-music-official
功能描述
按小智官方 MCP 接入方式,为小智增加在线音乐播放能力。适用于已经有小智 MCP 接入点(wss://api.xiaozhi.me/mcp/?token=...)并希望通过 MCP 工具实现搜歌、播放、暂停、继续、停止等在线音乐控制的场景。支持在线音乐 API 搜索、多源 fallback、调用本地播放器播放网...
安全使用建议
This skill implements a local MCP-to-player music bridge and will: (1) open a websocket to whatever MCP_ENDPOINT you supply, (2) call third‑party music API endpoints (api-v2.yuafeng.cn) with your MUSIC_API_KEY, and (3) spawn local player processes (mpv by default) and use pkill to control them. Before installing: - Only connect to an MCP endpoint you trust; whatever endpoint you provide can instruct the bridged script to run the exposed tool operations. - Be aware MUSIC_API_KEY will be sent to api-v2.yuafeng.cn; confirm that domain is the intended music API provider or replace it with a provider you trust. - Registry metadata omitted required env vars (MCP_ENDPOINT, MUSIC_API_KEY, etc.); supply these deliberately and do not paste secrets from unrelated services. - Running this on a shared or production host can fetch remote audio and spawn processes; consider running in a sandbox/container and ensure mpv and pkill behavior is acceptable. - If you need higher assurance, review/replace the third‑party API URLs in music_mcp.py and audit the fastmcp dependency implementation before use.
功能分析
Type: OpenClaw Skill
Name: xiaozhi-mcp-music-official
Version: 1.0.0
The skill bundle provides a legitimate MCP (Model Context Protocol) bridge for searching and playing online music using a local media player like mpv. It uses standard subprocess calls in music_mcp.py to control playback and communicates with third-party music APIs (yuafeng.cn) to fetch track information and stream URLs. No evidence of malicious intent, data exfiltration, or prompt injection was found.
能力评估
Purpose & Capability
The code implements an MCP music bridge consistent with the description (websocket MCP endpoint → bridge → music API → local player). However the package/registry metadata declared no required environment variables while the code requires MCP_ENDPOINT and MUSIC_API_KEY (plus optional MUSIC_SOURCE and PLAYER_CMD). That mismatch is an incoherence between what the skill claims and what it actually needs.
Instruction Scope
The SKILL.md instructions align with the code: it tells the user to set environment variables, install dependencies, and run the bridge. The instructions do not ask to read unrelated files or credentials. Note: the runtime will open a websocket to an external MCP endpoint and will call third‑party music API endpoints (api-v2.yuafeng.cn) — both are expected for this skill but imply you must trust those remote services.
Install Mechanism
There is no special installer; user is instructed to pip install the requirements.txt bundled with the skill. No arbitrary downloads or URL-based installers are present in the files provided.
Credentials
The code expects MCP_ENDPOINT and MUSIC_API_KEY (and may send MUSIC_API_KEY as an 'apikey' parameter to api-v2.yuafeng.cn). The registry metadata incorrectly lists no required env vars/credentials. Requiring an API key and connecting to a remote websocket is proportionate for a music bridge, but the metadata omission and the fact that the key is sent to a third‑party domain are notable risks — the user may unintentionally leak an API key to an unexpected host. PLAYER_CMD and MUSIC_SOURCE are also read from env but were not declared in metadata.
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous invocation. It does not attempt to alter other skills or system-wide config. It spawns local processes (player, pkill/pause/resume) which is expected for local playback control; run-time privileges are limited to what the user process has.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install xiaozhi-mcp-music-official - 安装完成后,直接呼叫该 Skill 的名称或使用
/xiaozhi-mcp-music-official触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: official-style XiaoZhi MCP online music bridge with online search, fallback, and local player playback support.
元数据
常见问题
Xiaozhi Mcp Music Official 是什么?
按小智官方 MCP 接入方式,为小智增加在线音乐播放能力。适用于已经有小智 MCP 接入点(wss://api.xiaozhi.me/mcp/?token=...)并希望通过 MCP 工具实现搜歌、播放、暂停、继续、停止等在线音乐控制的场景。支持在线音乐 API 搜索、多源 fallback、调用本地播放器播放网... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 142 次。
如何安装 Xiaozhi Mcp Music Official?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xiaozhi-mcp-music-official」即可一键安装,无需额外配置。
Xiaozhi Mcp Music Official 是免费的吗?
是的,Xiaozhi Mcp Music Official 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Xiaozhi Mcp Music Official 支持哪些平台?
Xiaozhi Mcp Music Official 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Xiaozhi Mcp Music Official?
由 joe12801(@joe12801)开发并维护,当前版本 v1.0.0。
推荐 Skills