report

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill manages authentication by reading credentials from localized settings files (e.g., .spotify-ads-api.local.md), which is a recommended practice for keeping sensitive tokens out of the shared skill code.
  • [SAFE]: All network requests are directed to official Spotify infrastructure (api-partner.spotify.com), consistent with the skill's intended functionality and the author's identity.
  • [SAFE]: The use of the Bash tool is restricted to executing curl commands for API interaction. The instructions include specific validation guardrails for parameters to ensure inputs conform to expected formats and ranges.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 06:04 AM
Security Audit — agent-trust-hub — report