Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

spotify-control

macOS Spotify control skill for OpenClaw. Supports playback, volume, position, and metadata retrieval via AppleScript.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 192 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the included SKILL.md and the Python wrapper. The only operations are AppleScript calls to the Spotify app via osascript, which is exactly what a macOS Spotify controller would need.
Instruction Scope
SKILL.md limits behavior to one-shot AppleScript commands and explicitly references using the provided scripts/spotify-control.py wrapper. The wrapper only constructs AppleScript and invokes osascript; it does not read files, environment variables, or send data to external endpoints.
Install Mechanism
No install spec is present (instruction-only with a helper script). Nothing is downloaded or written to disk by an installer; risk is minimal. The script will run on-demand using the system's Python and osascript.
Credentials
The skill declares no required environment variables or credentials and the code does not access any secrets, network sockets, or unrelated config paths. This is proportionate to the stated purpose.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system-wide settings. Autonomous invocation is allowed by platform default; combined with this skill's limited scope, that is low risk.
Assessment
This skill appears coherent and low-risk: it simply runs AppleScript (via osascript) to control the local Spotify app and does not access credentials or the network. Before installing, confirm you are comfortable giving the agent the ability to control local media playback (an autonomous agent could change or pause music). If you want extra assurance, inspect or run scripts/spotify-control.py locally to verify behavior and ensure osascript and Spotify are available on the target macOS machine. If the author is unknown and you don't want an agent to change audio automatically, avoid enabling autonomous invocation or restrict when the skill may be used.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.1
Download zip
latestvk97btwqnd81nt28y1m61jypctd82kgfs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Spotify Control (macOS)

Overview

Control Spotify on macOS using AppleScript. This skill provides a set of commands to manage playback, volume, and track information.

Actions

Playback Control

  • Play/Pause: Toggle playback.
  • Next/Previous: Jump to next or previous track.
  • Stop: Pause playback.

Volume & Position

  • Set Volume (0-100): Adjust Spotify internal volume.
  • Set Position (seconds): Jump to a specific time in the current track.

Metadata & State

  • Get Info: Retrieve current track name, artist, album, and Spotify URL.
  • Set Shuffle (on/off): Toggle shuffle mode.
  • Set Repeat (on/off): Toggle repeat mode.

Usage

Agents should use the scripts/spotify-control.py wrapper for all commands.

Examples

# Toggle play/pause
scripts/spotify-control.py playpause

# Get current track info
scripts/spotify-control.py get-info

# Set volume to 80%
scripts/spotify-control.py set-volume 80

# Seek to 1 minute (60s)
scripts/spotify-control.py set-position 60

Guardrails

  • Ensure Spotify is installed and running.
  • All commands are one-shot AppleScript executions via a Python wrapper.
  • Does not affect system-wide volume unless specified for fallback.

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…