spotify-player

SUSPICIOUS: The skill’s purpose is coherent, but the preferred path relies on a third-party tap and imports browser Spotify cookies into an external CLI. No clear malicious endpoint or hidden behavior is shown, yet credential handling and install trust are broader than ideal for a media-control skill.