ClawHub

网易云音乐网页版控制

v0.1.6

Control NetEase Cloud Music Web in a browser. Use to (1) search and play a song by keyword, preferably artist + title, or (2) open My Music and play one of t...

⭐ 0· 140·0 current·0 all-time
by@yangyunzhao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the contents of SKILL.md. The skill is an instruction-only browser-control helper and does not request unrelated environment variables, binaries, or installs.
ℹ
Instruction Scope
SKILL.md stays within the stated purpose (search and play songs or playlists on the NetEase web player). It assumes control of the browser/DOM and that the user is logged in for 'My Music' mode — the doc is implementation-agnostic and gives the agent behavioral rules rather than low-level commands. That vagueness is not a security red flag by itself but means the agent will need browser-control capabilities (and access to the user's logged-in session) to operate.
✓
Install Mechanism
No install spec or code files to download or execute. Instruction-only skills are lowest-risk from an install perspective.
✓
Credentials
The skill declares no environment variables, credentials, or config paths. The only implied requirement is access to the user's browser session (cookies/auth) for playlist playback, which is consistent with the described functionality.
✓
Persistence & Privilege
always is false and there is no attempt to modify other skills or system-wide settings. Autonomous invocation is enabled by default (normal) and does not combine with other red flags.
Assessment
This skill appears coherent and does not ask for credentials or install code. Before enabling it, confirm your agent platform actually grants it only the browser-control capability you expect (it will need access to the browser DOM and your logged-in NetEase session for 'My Music' playlists). Because the SKILL.md is implementation-agnostic, review any future versions that add scripts or installers (the repository includes an empty scripts/ folder reserved for future helpers) and avoid granting broad system-level permissions you don't intend.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cvr606f5keyfrkrda72e71583ad4d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments