Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lu Music Player

v1.0.0

Manage and control Mopidy music service on NAS including playback, volume, playlist viewing, and local music scanning.

0· 302·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jesson1222-ship-it/lu-music-player.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Lu Music Player" (jesson1222-ship-it/lu-music-player) from ClawHub.
Skill page: https://clawhub.ai/jesson1222-ship-it/lu-music-player
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install jesson1222-ship-it/lu-music-player

ClawHub CLI

Package manager switcher

npx clawhub@latest install lu-music-player
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description match the instructions: SKILL.md gives Mopidy status, playback control, volume, scanning, and playlist guidance. However the doc contains hardcoded host addresses (192.168.3.26 and music.jesson.online), a specific local path (/vol1/1000/...), and assumes a Docker container named 'mopidy' — these are environment-specific and not generally applicable.
Instruction Scope
Instructions stay within the Mopidy management scope (checking logs, docker commands, restarting, scanning). They include troubleshooting steps that require shell access (docker exec, docker-compose restart, docker logs) and suggest 'chmod -R 777' for a music folder — a potentially dangerous, overly-permissive operation. The skill also references external URLs (an IP and a domain) and shows example commands; no hidden data-exfiltration steps are present.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes installation risk because nothing is written/executed automatically by the skill itself.
Credentials
The skill declares no required environment variables or credentials. The SKILL.md suggests optional MOPIDY_URL and MOPIDY_IRIS_URL variables for convenience, which is proportionate. No unrelated credentials or secrets are requested.
Persistence & Privilege
always is false (no forced/global presence) and model invocation is normal. The skill doesn't request persistent system changes or attempt to modify other skills; it only provides manual commands for the user/administrator to run.
Assessment
This skill appears to be a simple Mopidy/NAS helper and is internally consistent, but it's tailored to the author's environment. Before using: (1) Don't blindly run commands — verify container names and paths on your system. (2) Replace or remove hardcoded URLs/IPs and set MOPIDY_URL/MOPIDY_IRIS_URL to your values. (3) Avoid 'chmod -R 777' — prefer correcting ownership/permissions with least privilege. (4) Be cautious about running docker exec/docker-compose restart on production machines. If you want the skill generalized, ask the author to remove hardcoded addresses and avoid recommending globally permissive file permissions.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bsewzwxb31hjdw1dcc99bfn82hgvb
302downloads
0stars
1versions
Updated 5h ago
v1.0.0
MIT-0

lu-music-player

Mopidy 音乐播放器管理技能 - 帮助你管理和控制 NAS 上的 Mopidy 音乐服务。

描述

这个技能提供 Mopidy 音乐播放器的管理功能,包括:

  • 查看播放状态
  • 控制播放/暂停/跳过
  • 音量调节
  • 扫描本地音乐
  • 查看播放列表

触发条件

当用户提到以下关键词时激活:

  • "mopidy"
  • "音乐播放器"
  • "播放音乐"
  • "暂停音乐"
  • "下一首"
  • "音量"
  • "扫描音乐"

用法

查看播放状态

mopidy 状态
音乐播放器状态
当前播放什么

控制播放

播放音乐
暂停音乐
下一首
上一首

音量控制

音量调到 50
音量加 10
音量减 10
静音

音乐库管理

扫描本地音乐
刷新音乐库
查看播放列表

示例对话

用户: mopidy 状态怎么样? 助手: Mopidy 音乐播放器运行正常!当前状态:空闲。访问 http://192.168.3.26:6680/iris 查看 Web 界面。

用户: 播放音乐 助手: 已打开 Mopidy Web 界面:http://192.168.3.26:6680/iris 你可以在 Iris 界面中选择歌曲播放。

用户: 扫描本地音乐 助手: 请在 Iris 界面中:Settings → Local Music → Scan 扫描本地音乐库。或者执行命令:docker exec mopidy mopidy local scan

配置

环境变量(可选)

MOPIDY_URL=http://192.168.3.26:6680
MOPIDY_IRIS_URL=http://192.168.3.26:6680/iris

Docker 命令

# 查看状态
docker ps | grep mopidy

# 查看日志
docker logs mopidy --tail 50

# 重启服务
docker-compose restart mopidy

# 扫描本地音乐
docker exec mopidy mopidy local scan

访问地址

服务地址
Mopidy Irishttp://192.168.3.26:6680/iris
Mopidy HTTPShttps://music.jesson.online:1443/iris

故障排查

音乐播放器无法访问

  1. 检查容器状态:docker ps | grep mopidy
  2. 查看日志:docker logs mopidy --tail 50
  3. 重启服务:docker-compose restart mopidy

无法播放本地音乐

  1. 确保音乐文件在 /vol1/1000/Docker/music-player/music/ 目录
  2. 在 Iris 界面扫描:Settings → Local Music → Scan
  3. 检查文件权限:chmod -R 777 /vol1/1000/Docker/music-player/music/

作者

  • 作者: jesson1222-ship-it
  • 版本: 1.0.0
  • 创建时间: 2026-03-08
  • 许可证: MIT

更新日志

v1.0.0 (2026-03-08)

  • 初始版本
  • 支持 Mopidy 状态查看
  • 支持播放控制
  • 支持音量调节
  • 支持音乐库扫描

Comments

Loading comments...