spotify
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for controlling a local Spotify client using well-known open-source tools. There are no indications of malicious intent or unauthorized access.
- [EXTERNAL_DOWNLOADS]: The documentation suggests installing dependencies through standard, trusted package managers like Homebrew and Cargo. The recommended tools, spotify_player and spogo, are established projects for terminal-based music control.
- [COMMAND_EXECUTION]: The skill uses Bash commands to interact with the installed Spotify CLI clients. These commands are limited to playback control (play, pause, skip), volume management, and search queries, all of which align with the skill's stated purpose.
- [DATA_EXPOSURE]: The instructions explicitly include a rule to never expose OAuth tokens in the output, demonstrating a best-practice approach to handling sensitive authentication data.
Audit Metadata