ClawHub

Discogs Sync

v0.1.10

Add and remove albums from a Discogs wantlist or collection by artist and album name, master ID, or release ID. Search marketplace pricing for vinyl, CD, and...

⭐ 0· 433·0 current·0 all-time
byKevin Haney@khaney64
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (manage Discogs wantlist/collection and marketplace lookups) align with the shipped code and CLI commands. Required binary (python3) and packaged dependencies are appropriate for a Python CLI that talks to the Discogs API.
✓
Instruction Scope
SKILL.md and the code instruct the agent to run the provided Python CLI which performs only Discogs-related actions (searches, adds/removes items, marketplace price lookups, caching). The CLI prompts interactively for auth and does not request unrelated files or system credentials.
ℹ
Install Mechanism
There is no platform install spec in registry metadata, but the entry script (discogs-sync.py) bootstraps a local virtualenv (.deps in the skill directory) and pip-installs requirements from requirements.txt on first run. This writes files under the skill directory and fetches packages from PyPI — expected for this type of tool but worth noting because it performs network installs and writes an on-disk venv.
✓
Credentials
The skill requests no environment variables or unrelated credentials. It stores Discogs credentials locally in ~/.discogs-sync/config.json (supports both personal token and OAuth) which is proportional and expected for a Discogs client. Config writes are permission-restricted (chmod 600) on non-Windows platforms.
ℹ
Persistence & Privilege
The skill persists credentials and caches to the user's home directory (~/.discogs-sync). It does not set always:true and uses normal autonomous invocation settings. Persisting tokens and caches is expected, but users should be aware of on-disk credential storage and the creation of the .deps venv inside the skill directory.
Assessment
This skill appears coherent and implements what it claims: a Python CLI that interacts with the Discogs API. Before installing, be aware that (1) on first run it will create a local virtual environment (.deps) inside the skill directory and install packages from PyPI (network activity and files written to disk), (2) it stores your Discogs credentials in ~/.discogs-sync/config.json (the tool attempts to restrict permissions on non-Windows), and (3) it will perform network requests to api.discogs.com via the python3-discogs-client package. If you trust the skill author and are comfortable with the local venv and on-disk credential storage, the footprint is proportionate. If you prefer, review the included source files (they're present) or run in a sandboxed account/VM. If you have a Discogs personal access token, prefer giving a token with limited scope and revoke it if you stop using the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk972abp9bnsytmvpfpvfna24gx83dc1k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎵 Clawdis
Binspython3

Comments