Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Apple Music
v1.0.6Apple Music integration via AppleScript (macOS) or MusicKit API
⭐ 2· 2.3k·12 current·12 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md is a legitimate Apple Music integration guide (AppleScript for macOS and MusicKit API). However the registry metadata lists no OS restriction even though the AppleScript approach requires macOS; the SKILL.md declares a different internal version (0.6.0) than the registry (1.0.6). The skill's declared requirements (no env vars, no binaries) are plausible for AppleScript but incomplete for MusicKit, which requires developer tokens that are not declared.
Instruction Scope
The instructions explicitly tell the agent to run osascript AppleScript snippets that read and write the user's Music library and player state — this is coherent with the described purpose. Note: AppleScript has broad access on macOS and the scripts shown can read extensive personal listening/library metadata. The doc references MusicKit (server-side API) but does not explain where or how tokens should be provided or stored.
Install Mechanism
No install spec and no code files — instruction-only — so there is nothing written to disk or fetched during install. That lowers the technical risk, but runtime behavior (running osascript or calling external APIs) remains relevant.
Credentials
The skill declares no required environment variables, yet the SKILL.md explicitly references the MusicKit API which requires developer tokens and user tokens to access library/catalog. Not declaring where those credentials come from is an incoherence. Also the skill owner/source is unknown and no homepage is provided, so there is no clear trust anchor for any token-handling guidance.
Persistence & Privilege
always is false and model invocation is allowed (default). The skill does not request persistent system-wide changes or claim to modify other skills; no elevated persistence is requested.
What to consider before installing
This skill appears to be a genuine Apple Music integration guide, but several mismatches deserve attention before installing:
- Platform mismatch: The SKILL.md relies on macOS AppleScript (osascript). If you plan to run agents on Windows/Linux, AppleScript parts won't work — the registry entry should have been restricted to macOS.
- Missing credentials handling: MusicKit requires developer and user tokens. The skill does not declare required env vars or explain how tokens are provided/stored. Ask the author how MusicKit auth is expected to be supplied and where secrets are kept.
- Source trust: The skill lists no homepage and an unknown owner ID. Prefer skills with a verifiable repository or homepage; lack of provenance increases risk if the skill ever requests or handles tokens.
- Privacy: The AppleScript examples show reading track lists, played date, and other personal library metadata. Running the skill will expose your local Music library data to whatever the agent logs or transmits — ensure you understand whether outputs are kept locally or sent externally.
- Operational safety: Because the skill runs osascript snippets, confirm that the agent will only execute AppleScript targeting the Music app and that it will require explicit user confirmation before running arbitrary scripts. Ask for explicit limits (e.g., 'only run these approved commands') and for the skill to declare required env vars for MusicKit if API use is intended.
If you still want to proceed, request that the publisher:
1) Restrict the skill to macOS in metadata or clearly separate macOS vs MusicKit variants;
2) Declare required env vars (developer token, user token) and where they should be set;
3) Provide a homepage/repository for audit and a contact for questions;
4) Explain whether the agent will transmit library data externally and include safeguards (user confirmations, scope-limited scripts).
Given these gaps, do not enable this skill for autonomous use on shared or sensitive systems until the above clarifications are provided.Like a lobster shell, security has layers — review code before you run it.
apivk972rz5mkzs9xktxgs9rfdka017ywq6fapplevk972rz5mkzs9xktxgs9rfdka017ywq6fapplescriptvk972rz5mkzs9xktxgs9rfdka017ywq6flatestvk972rz5mkzs9xktxgs9rfdka017ywq6fmacosvk972rz5mkzs9xktxgs9rfdka017ywq6fmcpvk972rz5mkzs9xktxgs9rfdka017ywq6fmusicvk972rz5mkzs9xktxgs9rfdka017ywq6f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.