Music Recommender
v1.0.0Analyze NetEase Cloud Music (网易云音乐) playlist and recommend songs matching their taste. Use when user asks for music recommendations, wants a daily playlist,...
⭐ 0· 42·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included scripts: fetch_playlist.py queries NetEase, analyze_taste.py profiles tracks, search_bilibili.py finds Bilibili links, and history.py manages local daily history. No unrelated credentials, binaries, or external services are required.
Instruction Scope
SKILL.md instructs the agent to run the provided scripts, query NetEase and Bilibili APIs, and read/write history files under ~/.openclaw/workspace/music-history. That is within the skill's scope. Minor scope mismatch: SKILL.md mentions offering to write to Notion (and other external saves) but there is no Notion integration code or required env vars in the package—this is an unimplemented optional feature and should not be assumed available.
Install Mechanism
Instruction-only skill with bundled scripts; no installer, downloads, or archive extraction. Scripts run directly with the system Python interpreter. No high-risk install behavior detected.
Credentials
The skill requests no environment variables or credentials. It performs unauthenticated HTTP GETs to public NetEase and Bilibili endpoints (using a static Cookie header fragment for NetEase). This is proportional to its stated functionality. Note: network access will expose playlist metadata and search queries to those external services.
Persistence & Privilege
The skill writes and reads JSON files under ~/.openclaw/workspace/music-history to enforce daily recommendations and de-duplication. This is expected for the feature but means recommendation history is stored unencrypted in the user's home directory. always is false and the skill does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it fetches a NetEase playlist, analyzes it, searches Bilibili for playable links, and saves daily recommendations locally. Before installing, be aware it will: (1) make outbound requests to music.163.com and api.bilibili.com, (2) create/read/write files at ~/.openclaw/workspace/music-history (clear-text JSON), and (3) has an unimplemented mention of Notion saving (no credentials or code provided). If you are comfortable with those network calls and local files, the skill is coherent. If you want to limit data exposure, run it in an environment with controlled network access or inspect/modify the scripts (they are plain Python) to change the history path or disable saving.Like a lobster shell, security has layers — review code before you run it.
latestvk97cvm2s6mmqpg0q894xpr07xh842p77
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
