Home Music
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: home-music Version: 1.0.0 This skill is designed to control whole-house music scenes using Spotify and Airfoil on macOS. It uses AppleScript (`osascript`) to interact with the Airfoil application and relies on a local `spotify-applescript` skill for Spotify control. The `SKILL.md` provides clear installation instructions, including a `sudo ln -sf` command to create a symlink for global access, which is a common practice for CLI tools and not indicative of malicious intent. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. All actions are aligned with the stated purpose.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running a scene can start music, route it to speakers, and change volume across the home.
The script can connect speakers, change speaker volume, and start Spotify playback. This is expected for a whole-house music controller, but it affects the user's local audio environment.
airfoil_connect "$speaker" ... airfoil_volume "$speaker" 0.7 ... "$SPOTIFY_CMD" play "$PLAYLIST_PARTY"
Review and adjust the configured speakers, playlists, and volumes before using the scenes, especially party mode.
The skill may fail on other Macs or may depend on behavior from a separate helper script not reviewed as part of this package.
The skill calls an external local spotify-applescript helper that is not included in the provided file manifest, and the path is hardcoded to an author-specific home directory.
SPOTIFY_CMD="/Users/asteinberger/clawd/skills/spotify-applescript/spotify.sh"
Verify the spotify-applescript helper before use and update the path to the correct local installation, preferably using a user-relative path.
After setup, the command can be run from anywhere, and the sudo symlink may overwrite an existing /usr/local/bin/home-music entry.
The setup instructions make the script executable and create a privileged global command symlink. This is disclosed and user-directed, but it modifies a system-wide command path.
chmod +x ~/clawd/skills/home-music/home-music.sh sudo ln -sf ~/clawd/skills/home-music/home-music.sh /usr/local/bin/home-music
Inspect the script first, then run the setup only if you are comfortable adding a global command; consider using a non-sudo user-local bin directory instead.