macOS Spotify control skill for OpenClaw. Supports playback, volume, position, and metadata retrieval via AppleScript.
Security Analysis
high confidenceThe skill's code, instructions, and requirements align with a macOS AppleScript-based Spotify controller and request no unrelated permissions or secrets.
Name/description match the included SKILL.md and the Python wrapper. The only operations are AppleScript calls to the Spotify app via osascript, which is exactly what a macOS Spotify controller would need.
SKILL.md limits behavior to one-shot AppleScript commands and explicitly references using the provided scripts/spotify-control.py wrapper. The wrapper only constructs AppleScript and invokes osascript; it does not read files, environment variables, or send data to external endpoints.
No install spec is present (instruction-only with a helper script). Nothing is downloaded or written to disk by an installer; risk is minimal. The script will run on-demand using the system's Python and osascript.
The skill declares no required environment variables or credentials and the code does not access any secrets, network sockets, or unrelated config paths. This is proportionate to the stated purpose.
always is false and the skill does not attempt to modify other skills or system-wide settings. Autonomous invocation is allowed by platform default; combined with this skill's limited scope, that is low risk.
Guidance
This skill appears coherent and low-risk: it simply runs AppleScript (via osascript) to control the local Spotify app and does not access credentials or the network. Before installing, confirm you are comfortable giving the agent the ability to control local media playback (an autonomous agent could change or pause music). If you want extra assurance, inspect or run scripts/spotify-control.py locally to verify behavior and ensure osascript and Spotify are available on the target macOS machine. If the author is unknown and you don't want an agent to change audio automatically, avoid enabling autonomous invocation or restrict when the skill may be used.
Latest Release
v1.0.1
- Initial release of the spotify-control skill for macOS. - Added the core script: scripts/spotify-control, providing playback, volume, position, and metadata commands via AppleScript. - Updated usage instructions to remove "./" from script invocation examples for improved clarity.
Popular Skills
Published by @copywrite-ai on ClawHub
