Sonos 音乐点播
v0.2.1面向中文用户的 Sonos 音乐点播技能。支持通过 Sonos 侧搜索加队列起播的方式播放已绑定音乐服务,当前已验证兼容 网易云音乐 和 QQ音乐。通过 SoCo 将搜索结果转成 Sonos 队列项,再从队列起播,以保留 Sonos App 中的标题、歌手、专辑和封面等 metadata。
⭐ 0· 63·0 current·0 all-time
bySengo Zhao@huacius
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Sonos music playback) matches what the files do: they check for the sonos CLI, create a Python venv, and install the soco library to drive Sonos queue-based playback. Asking for the sonos binary and installing soco is appropriate for this purpose.
Instruction Scope
SKILL.md and the scripts only instruct running local install/check/bootstrap scripts and wrappers; they do not reference unrelated system files or external endpoints. Note: the runtime scripts expect external playback wrapper/script files (sonos_netease_play.sh/.py and sonos_qq_play.sh/.py) to exist in the workspace — those playback entrypoints are not included in this package and should be inspected before use.
Install Mechanism
There is no packaged install spec; the included bootstrap script creates a local Python venv and runs pip to install soco from PyPI. Installing packages from PyPI is expected here; this is moderate-risk (network fetch) but coherent with the skill's purpose. No downloads from arbitrary URLs or archive extraction are present.
Credentials
The skill does not request credentials or secret env vars. It does reference several OPENCLAW_* environment variables (workspace/venv/wrapper/script paths) for configuration, but these path-overrides are not declared in the registry metadata. This is low risk but worth noting: those env vars control file locations and are not secrets.
Persistence & Privilege
The skill does not request always:true or system-wide privileges. The scripts only create a venv, install soco into that venv, and set executable bits on wrapper files in the workspace — actions confined to the skill's workspace/venv.
Assessment
This skill appears coherent with its stated purpose. Before installing: (1) ensure you have the official sonos CLI from a trusted source; (2) inspect the playback wrapper and Python playback scripts (sonos_netease_play(.sh/.py), sonos_qq_play(.sh/.py)) that are expected in your workspace — they are not bundled here and will be executed by the wrappers; (3) be aware the bootstrap will pip install 'soco' into a venv (network access to PyPI); and (4) if you do not trust the unbundled playback scripts, do not run the install/bootstrap steps. If you want extra caution, run the install steps in an isolated environment or container and review outputs before using with real Sonos devices.Like a lobster shell, security has layers — review code before you run it.
latestvk970drb9ny8mgmzr3d933amz7584fgn8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binssonos
