59/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： unknown

OpenClaw： suspicious

The skill appears to implement the claimed Spotify→Spotify.app workflow, but it requires Spotify client credentials and reads a local config file (not declared in the metadata or SKILL.md), which is a...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771232006477,
        "_id": "k972dazmkhcw28fsfn9gm5q89d81811s",
        "changelog": "spotplay 0.1.0 初始版本\n\n- 使用 Spotify.app 及 AppleScript 播放 Spotify 歌曲，不依賴 spogo 或 Web Player。\n- 根據使用者輸入關鍵字自動搜尋並播放歌曲。\n- 播放後回報目前播放曲名、歌手與 URI，方便 debug。\n- 若 Spotify.app 未啟動會自動啟動，搜尋不到歌曲時給予明確提示。\n- 僅適用於 macOS，須安裝 Spotify.app。",
        "changelogSource": "auto",
        "createdAt": 1771232006477,
        "version": "0.1.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "uxbryan",
        "handle": "uxbryan",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/5593084?v=4",
        "kind": "user",
        "linkedUserId": "kn71w4d4a9y3mk07e7kz10ze6x818veq"
    },
    "ownerHandle": "uxbryan",
    "skill": {
        "_creationTime": 1771232006477,
        "_id": "kd7bh0cq3jb1qvx1as7y98rhed818anj",
        "badges": [],
        "createdAt": 1771232006477,
        "displayName": "Spotplay",
        "latestVersionId": "k972dazmkhcw28fsfn9gm5q89d81811s",
        "ownerUserId": "kn71w4d4a9y3mk07e7kz10ze6x818veq",
        "slug": "spotplay",
        "stats": {
            "comments": 0,
            "downloads": 457,
            "installsAllTime": 2,
            "installsCurrent": 2,
            "stars": 0,
            "versions": 1
        },
        "summary": "Search and play Spotify tracks via Spotify.app using AppleScript on macOS, ensuring playback on the active device with detailed status updates.",
        "tags": {
            "latest": "k972dazmkhcw28fsfn9gm5q89d81811s"
        },
        "updatedAt": 1772065840450
    }
}