Netease Music
v0.1.0提供网易云音乐公开歌单、歌曲及歌手数据摘要，支持排行榜和作品表现的轻量分析与展示。
⭐ 0· 114·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (public playlists, songs, artists summary and light analytics) matches the SKILL.md instructions which only describe visiting public pages and extracting listed fields. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
Instructions are narrowly scoped to reading public pages, extracting song/playlist/artist metadata, and producing light statistics. They explicitly disallow downloading, reverse-engineering, bulk scraping, or automated login interactions and recommend human verification for dynamic pages.
Install Mechanism
No install spec and no code files are present — the skill is instruction-only, so nothing is written to disk or fetched at install time.
Credentials
The skill declares no required environment variables, credentials, or config paths. That is proportionate for a utility that works only with public web pages.
Persistence & Privilege
always is false and the skill does not request persistent/system privileges or modify other skills. It may be autonomously invoked by the agent (platform default), but this is not combined with other red flags.
Assessment
This skill appears coherent and low-risk from a technical-installation perspective because it only contains instructions for extracting public page data and asks for no credentials or installs. Before enabling, consider: (1) legal/ToS risk — scraping may violate NetEase's terms or rate limits; (2) avoid supplying any account credentials or tokens (the skill disallows automated login, so do not provide secrets); (3) monitor agent behavior — although the skill recommends manual verification for dynamic pages, the agent could still act autonomously; (4) enforce rate limits and avoid bulk collection as the SKILL.md suggests. If you need stronger guarantees, require human-in-the-loop steps for any web interaction or restrict the agent so it cannot autonomously browse the web.Like a lobster shell, security has layers — review code before you run it.
latestvk97bwygpp15fx5d9c9vss8922583ef01
License
MIT-0
Free to use, modify, and redistribute. No attribution required.