ClawTune 抓音 是一款可以给你带来 AI 音乐的技能，包括听歌和创作。
v1.0.0为人类用户提供 AI 原创音乐歌单，并在合适时机把灵感推进成一首歌。用户提到想听背景音乐、需要歌单、表达情绪、送礼、纪念、想把故事写成歌、想下单、想查完成后结果时，都应优先使用本 skill。始终遵守对象锚点与恢复规则，不要临时自由发挥。
⭐ 1· 107·0 current·0 all-time
by代码厨子@spirits001
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (AI playlists and song creation) align with the included scripts and API calls: generate-playlist, create-draft/update-draft, create-order, check-order-status/delivery, recover-order. The scripts consistently target the documented base API (https://clawtune.aqifun.com/api/v1) and implement the playlist->draft->order->recovery flow described in SKILL.md.
Instruction Scope
SKILL.md explicitly instructs the agent to use the bundled scripts and to read/write session/auth state when the host supports scripts/HTTP. The scripts will: perform HTTP requests to the clawtune API, read/write session.json and auth.json under a state directory (default $HOME/.openclaw/clawtune), save logs/evidence if CLAWTUNE_EVIDENCE_DIR is set, and run small Python snippets. These actions are within scope for a service integrator but do mean persistent local storage of tokens and session data and network communication to the specified domain.
Install Mechanism
There is no external install or remote-download step; this is an instruction-only skill with bundled scripts. No untrusted URL downloads or package installs were found. Scripts rely on standard tools (bash, curl, python3) but the registry did not list required binaries.
Credentials
The registry declares no required env vars or credentials. In practice the scripts use (and optionally accept) many environment variables (e.g., CLAWTUNE_BASE_URL, CLAWTUNE_STATE_DIR, CLAWTUNE_EVIDENCE_DIR, CLAWTUNE_IDEMPOTENCY_KEY, CLAWTUNE_USER_REF). The auth flow writes and later reads access/refresh tokens from disk rather than demanding pre-provisioned secrets — which is reasonable for a bootstrap flow but means the skill will persist credentials locally. The number of optional env vars is proportional to integrating with an API, but the omission of required binaries/envs in the metadata is a mild inconsistency.
Persistence & Privilege
always:false (normal). The skill persists state and credentials to disk (default ~/.openclaw/clawtune) and saves evidence/logs to CLAWTUNE_EVIDENCE_DIR if set. Persisting tokens and session state is expected for this integration, but users should be aware that sensitive tokens are stored locally and that scripts may create files in the user's home directory.
Assessment
This skill appears to do what it says: it uses bundled shell/Python scripts to call a ClawTune API and manage playlist→draft→order→recovery flow. Before installing, consider: 1) runtime requirements — it needs shell access, curl and python3 (scripts will fail without them) and network access to https://clawtune.aqifun.com; the registry did not explicitly list these requirements. 2) local persistence — it will create and update files under a default state dir (~/.openclaw/clawtune) including auth.json (access/refresh tokens) and session.json; evidence/log directories may contain API payloads and responses if CLAWTUNE_EVIDENCE_DIR is set. 3) privacy — tokens and session data stored on disk should be treated as sensitive. 4) provenance — verify the API base URL and that you trust the ClawTune service before allowing scripts to run. If you want tighter control, run the scripts in an isolated environment, inspect the state directory contents, or require the host to disallow persistent evidence logging (unset CLAWTUNE_EVIDENCE_DIR) and/or set a custom CLAWTUNE_STATE_DIR to a controlled location.Like a lobster shell, security has layers — review code before you run it.
latestvk97bbjt5xs8017hyvnc56yxwxh837xax
License
MIT-0
Free to use, modify, and redistribute. No attribution required.