configure
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Executes local Python scripts included in the skill package (
scripts/oauth-flow.pyandscripts/refresh-token.py) to manage the OAuth 2.0 authorization flow and token lifecycle. - [COMMAND_EXECUTION]: Uses the macOS
securityutility to manage sensitive credentials. It stores theclient_secretin the system keychain and retrieves it for token exchanges, ensuring the secret is never written to plaintext configuration files. - [EXTERNAL_DOWNLOADS]: Connects to
accounts.spotify.comandapi-partner.spotify.comto perform the OAuth flow and verify the resulting configuration. These network operations target official Spotify services necessary for the skill's functionality.
Audit Metadata