The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which presents a surface for indirect instructions to be ingested into the agent context.
Ingestion points: The tracks resolve command reads tracklists from stdin, and various other commands ingest structured data from the Spotify Web API responses.
Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore potentially malicious embedded content within the tracklists or API responses.
Capability inventory: The skill can execute CLI commands, write to local files via the --deliver file: sink, and perform network POST requests via the --deliver webhook: sink.
Sanitization: The instructions do not specify any prompt-level sanitization or validation of the data retrieved from Spotify or provided via stdin.
[EXTERNAL_DOWNLOADS]: The skill requires the installation of external binaries from the vendor's infrastructure.
Evidence: Instructions include npx -y @mvanhorn/printing-press-library install spotify and go install github.com/mvanhorn/printing-press-library/.... These target the verified vendor's official NPM package and GitHub repository.
[COMMAND_EXECUTION]: The skill's primary functionality is achieved by executing the spotify-pp-cli binary with various arguments based on user input, which is a standard pattern for CLI-based skills.
[DATA_EXFILTRATION]: Several features provide mechanisms that could be misused to exfiltrate data.
Webhook Sink: The --deliver webhook:<url> flag allows command output (which may contain user profile data, library information, or private playlists) to be sent to an arbitrary external URL.
Clipboard Access: The usage examples recommend using pbpaste to pipe data into the CLI. If an agent executes this, it accesses the system clipboard, which may contain sensitive data unrelated to Spotify.
[CREDENTIALS_UNSAFE]: The skill guides the user to set their access token using spotify-pp-cli auth set-token YOUR_TOKEN_HERE. While a standard auth flow, the token is stored in a local credentials.toml file. The skill appropriately suggests using environment variables as a safer alternative.

pp-spotify