ClawHub

Netease Cloud Music

v0.1.0

提供网易云音乐公开歌单、歌曲和歌手的播放及互动数据摘要，支持排行榜和作品表现分析。

⭐ 0· 266·0 current·0 all-time
by@mike47512
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (public playlist/song/artist summaries and rankings) match the SKILL.md: it only needs access to public pages and extraction of listed fields. No unrelated credentials, binaries, or installs are requested.
ℹ
Instruction Scope
SKILL.md confines actions to public pages and light analysis, recommends manual opening for dynamic rendering, and explicitly says not to perform automated login or bulk scraping. The guidance is appropriately scoped, but the phrases about using '登录态' for personal pages and '人工打开后触发解析' are slightly ambiguous about how login state or a browser DOM will be provided; the skill does not declare any mechanism for obtaining cookies/credentials.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded during install.
✓
Credentials
No environment variables, credentials, or config paths are requested. The SKILL.md mentions optional login state only as a caveat but does not require credentials—this is coherent but the platform/operator should ensure the agent will not attempt to access user cookies or secrets.
✓
Persistence & Privilege
always is false and the skill does not request elevated or persistent privileges. Autonomous invocation is allowed (platform default) which is expected for this kind of skill.
Assessment
This skill appears coherent and low-risk: it only describes scraping public NetEase Cloud Music pages and asks for no installs or secrets. Before installing, confirm (1) the agent will not attempt to read your browser cookies or prompt you to paste login tokens, (2) scraping frequency is rate-limited and respects the site's terms/robots.txt, and (3) if the agent runs autonomously you are comfortable with it visiting public music. If you plan to include private/personal pages, require an explicit, auditable mechanism for providing credentials rather than letting the skill assume access.

Like a lobster shell, security has layers — review code before you run it.

latestvk978fqmyq65k06j8kx31je9m4x835na9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments