多源音乐下载

从10个音乐平台搜索并下载MP3，自动切换音源和处理防盗链，保存至/tmp/music目录。

Security Scan

The code and instructions match the stated purpose (searching multiple music sites and downloading MP3s); there are no unexplained credentials or external endpoints beyond the listed music sites, but some risky implementation choices warrant caution.

Purpose & Capability

The skill's name/description (multi-source music downloader) matches the implementation: the Python file contains search and download logic for the ten listed music platforms and saves MP3s to /tmp/music. No unrelated services, credentials, or system-level accesses are requested.

Instruction Scope

SKILL.md instructs running the included Python script (it even shows an absolute path under /root/.openclaw/...); the instructions and code operate only on network requests to the listed music sites and write files to /tmp/music. Note: the SKILL.md and code explicitly disable SSL verification and suppress warnings, and the SKILL.md claims 'SSL绕过（已自动处理）' — this is a risky implementation detail (see user guidance).

Install Mechanism

There is no install spec (instruction-only), and the code file is bundled. No external installers, downloads from unknown URLs, or package installs were specified. The skill will run the included Python code when invoked.

Credentials

The skill declares no required environment variables, credentials, or config paths, and the code does not read any environment secrets. Network access is required and used only to contact the listed music platforms.

Persistence & Privilege

always is false and the skill is user-invocable. The script writes downloaded files to /tmp/music (ephemeral filesystem) and does not request persistent elevated privileges or modify system/other-skill configurations.

Assessment

What to consider before installing or running: - The code disables SSL verification (requests.verify=False) and suppresses related warnings; this makes HTTPS requests susceptible to MITM attacks — prefer enabling verification or running in a controlled environment. - The skill downloads content from many third-party music sites and saves files under /tmp/music; verify you are comfortable with legal/terms-of-service implications of scraping/downloading from those sites. - SKILL.md examples use an absolute path (/root/.openclaw/...), which may not match your environment; check and run the script from a non-privileged account. - Because this is an instruction-only skill with bundled code, review the Python file yourself (it is included) before running. If you want to reduce risk: run it in a sandbox/container, change the output directory from /tmp to a safer location, and re-enable SSL verification.

music-downloader 多源音乐下载技能

支持从多个音乐平台搜索并下载MP3文件。

功能

• 多源搜索 - 同时从10个音乐平台搜索歌曲
• 自动下载 - 获取播放链接并下载MP3文件
• 智能切换 - 一个音源失败自动切换到下一个
• 防盗链绕过 - 自动处理各平台的Referer

使用方式

# 命令行使用
python3 /root/.openclaw/workspace/skills/music-downloader/music_downloader.py "歌曲名"
python3 /root/.openclaw/workspace/skills/music-downloader/music_downloader.py "周杰伦 晴天"
python3 /root/.openclaw/workspace/skills/music-downloader/music_downloader.py "五月天 伤心的人别听慢歌"

支持的音源 (10个)

音源	平台	优先级
thttt.com	好听音乐网（酷我源）	1
kugou.com	酷狗音乐	2
kuwo.cn	酷我音乐	3
netease	网易云音乐	4
qq	QQ音乐	5
gequbao.com	歌曲宝	6
5nd.com	5nd音乐网	7
1ting.com	一听音乐	8
9ku.com	九酷音乐	9
musicenc.com	MusicEnc	10

工作流程

1. 搜索阶段 - 同时向所有可用音源发送搜索请求
2. 排序 - 按音源优先级整理结果
3. 获取链接 - 调用各平台API获取播放URL
4. 下载 - 使用正确的Referer绕过防盗链
5. 失败重试 - 下载失败自动尝试下一首

输出

• 下载成功：返回文件路径，如 /tmp/music/周杰伦_晴天.mp3
• 下载失败：返回错误信息

注意事项

• 部分平台需要SSL绕过（已自动处理）
• 酷我CDN需要特定的Referer头
• 下载的MP3文件保存在 /tmp/music/ 目录
• 文件名格式：歌手_歌名.mp3

依赖

• Python3
• requests 库
• 网络访问权限