assets
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system commands including
curl,stat,split, andrmto interact with the API and manage local file chunks during uploads. These operations are restricted to the intended purpose of managing advertising assets. - [CREDENTIALS_UNSAFE]: The skill implements a secure credential management pattern by reading the
access_tokenandad_account_idfrom local configuration files (e.g.,.codex/spotify-ads-api.local.md) rather than hardcoding sensitive data. It correctly directs users to a configuration skill if these settings are missing. - [EXTERNAL_DOWNLOADS]: API interactions are directed to
api-partner.spotify.com, which is the official domain for the vendor's services. No unauthorized or third-party external downloads were identified.
Audit Metadata