export
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard data export workflow for the Spotify Ads API. It correctly uses authorization headers for API requests and follows established security practices for credential management by reading them from local configuration files (e.g.,
.codex/spotify-ads-api.local.md) rather than hardcoding them. The use of Python's standardcsvmodule for file generation is a best practice that prevents CSV injection and ensures proper data formatting. All network operations are directed to official Spotify API domains (api-partner.spotify.com), and the logic includes appropriate user confirmation steps.
Audit Metadata