spotify
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the
spotifycommand-line tool to manage playback and volume settings. - [COMMAND_EXECUTION]: Utilizes
osascriptto execute AppleScript commands for interacting with the local Spotify desktop application. - [EXTERNAL_DOWNLOADS]: References the
shpotifydependency, which is a standard community tool for Spotify CLI control on macOS, installed via the Homebrew package manager. - [REMOTE_CODE_EXECUTION]: Involves the dynamic assembly and execution of AppleScript code strings at runtime through the
osascriptcommand. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes track metadata and user-supplied URIs.
- Ingestion points: Track and artist metadata returned by the
spotify statuscommand (SKILL.md). - Boundary markers: No delimiters or isolation warnings are used for metadata processing.
- Capability inventory: Shell and AppleScript execution capabilities via
spotifyandosascripttools (SKILL.md). - Sanitization: No sanitization or validation of URIs or track metadata is explicitly defined.
- [NO_CODE]: The skill consists primarily of markdown instructions and does not include any standalone executable script files (e.g., Python or JavaScript).
- [SAFE]: No malicious patterns or security risks were identified beyond the inherent nature of local application automation.
Audit Metadata