Kugou

v0.1.0

访问和摘要酷狗音乐公开歌单、排行榜及歌手作品的播放和收藏数据,支持趋势与风格分析。

0· 128·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (summarize public playlists, charts, artist metrics) align with the SKILL.md tasks and data fields. The skill asks for no unusual binaries, env vars, or config paths.
Instruction Scope
SKILL.md confines actions to public pages, describes fields to extract, and explicitly forbids downloads, API reverse-engineering, bulk scraping, and automated login interactions. It recommends manual opening for dynamic pages, which keeps scope narrow. No instructions ask the agent to read unrelated files or exfiltrate data.
Install Mechanism
No install spec or code files are present (instruction-only). Nothing will be written to disk by the skill itself.
Credentials
The skill declares no required credentials or env vars. SKILL.md mentions using a 'login state' only for personal-page summaries but says not to perform automated interactions; this is acceptable but ambiguous — if the agent executes in an environment with browser cookies/session tokens, those could be used implicitly. The skill itself does not request credentials.
Persistence & Privilege
always is false and agent invocation is user-invocable. There is no install, no self-modifying behavior, and no claims to modify other skills or system settings.
Assessment
This skill appears coherent: it only documents how to extract and summarize publicly visible Kugou pages and does not request credentials or install code. Things to consider before installing: (1) confirm the agent environment won't grant the skill access to your browser cookies or saved sessions unless you intend that — the SKILL.md mentions 'login state' but does not request credentials; (2) enforce the documented limits (no bulk scraping, no automated login) in any automated execution policy you use; (3) avoid providing your Kugou account credentials to the skill. If you need the skill to run fully automated, ask the author for explicit, minimal credential requirements and safe rate-limiting behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk972h30hhjy4qeppg49a4gn8kn8343kr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments