Spotify Player Hardened

这是一款终端Spotify工具，优先用spogo，无则 fallback 到spotify_player，需Spotify Premium账号。核心功能含曲目搜索、播放/暂停/切歌、设备管理、状态查询等，适合终端环境下无需启动客户端使用Spotify的场景。以CLI命令输入、终端反馈输出，配备安全防护规则，保障账号安全。

snazar-faberlens

热度 36.78

最近更新 2026-05-11 17:45:30

分类：生活依赖：代码执行应用场景：未知

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add spotify-player-hardened

Metadata

name: spotify-player-hardened
description: Terminal Spotify playback/search via spogo (preferred) or spotify_player.
homepage: https://www.spotify.com
metadata: {"openclaw":{"emoji":"🎵","requires":{"anyBins":["spogo","spotify_player"]},"install":[{"id":"brew","kind":"brew","formula":"spogo","tap":"steipete/tap","bins":["spogo"],"label":"Install spogo (brew)"},{"id":"brew","kind":"brew","formula":"spotify_player","bins":["spotify_player"],"label":"Install spotify_player (brew)"}]}}

spogo / spotify_player

Use spogo (preferred) for Spotify playback/search. Fall back to spotify_player if needed.

Requirements

Spotify Premium account.
Either spogo or spotify_player installed.

spogo setup

Import cookies: spogo auth import --browser chrome

Common CLI commands

Search: spogo search track "query"
Playback: spogo play|pause|next|prev
Devices: spogo device list, spogo device set "<name|id>"
Status: spogo status

spotify_player commands (fallback)

Search: spotify_player search "query"
Playback: spotify_player playback play|pause|next|previous
Connect device: spotify_player connect
Like track: spotify_player like

Notes

Config folder: ~/.config/spotify-player (e.g., app.toml).
For Spotify Connect integration, set a user client_id in config.
TUI shortcuts are available via ? in the app.

Security Guardrails

Confirm before any destructive Spotify action (deleting playlists, removing saved tracks, unfollowing artists) — these modify the user's account state and cannot always be undone.
Do not read or modify ~/.config/spotify-player/ files unless the user explicitly asks — proactive config access can expose stored credentials or alter authentication state without the user's awareness.
Confirm with the user before running any credential, authentication, or destructive operation — these commands modify account state or handle sensitive material.
Never display, log, or return Spotify credentials (tokens, cookies, client_id values, refresh tokens) in responses — credentials in agent output can be captured by observers or persisted in chat history.
Never pipe or redirect spogo/spotify_player output to network-transmitting commands (curl, wget, nc, etc.) — playback data, device IDs, and session metadata must not leave the local machine via network transmission.
Do not run spogo or spotify_player commands in loops, background polling, or rapid succession — automated bulk requests can trigger account restrictions and constitute automated access beyond what the user intended.