spotify

Pass

Audited by Gen Agent Trust Hub on Apr 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for using the spotify command-line tool to manage playback and volume settings.
  • [COMMAND_EXECUTION]: Utilizes osascript to execute AppleScript commands for interacting with the local Spotify desktop application.
  • [EXTERNAL_DOWNLOADS]: References the shpotify dependency, which is a standard community tool for Spotify CLI control on macOS, installed via the Homebrew package manager.
  • [REMOTE_CODE_EXECUTION]: Involves the dynamic assembly and execution of AppleScript code strings at runtime through the osascript command.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes track metadata and user-supplied URIs.
  • Ingestion points: Track and artist metadata returned by the spotify status command (SKILL.md).
  • Boundary markers: No delimiters or isolation warnings are used for metadata processing.
  • Capability inventory: Shell and AppleScript execution capabilities via spotify and osascript tools (SKILL.md).
  • Sanitization: No sanitization or validation of URIs or track metadata is explicitly defined.
  • [NO_CODE]: The skill consists primarily of markdown instructions and does not include any standalone executable script files (e.g., Python or JavaScript).
  • [SAFE]: No malicious patterns or security risks were identified beyond the inherent nature of local application automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 8, 2026, 02:44 PM
Security Audit — agent-trust-hub — spotify