report
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages authentication by reading credentials from localized settings files (e.g.,
.spotify-ads-api.local.md), which is a recommended practice for keeping sensitive tokens out of the shared skill code. - [SAFE]: All network requests are directed to official Spotify infrastructure (
api-partner.spotify.com), consistent with the skill's intended functionality and the author's identity. - [SAFE]: The use of the
Bashtool is restricted to executingcurlcommands for API interaction. The instructions include specific validation guardrails for parameters to ensure inputs conform to expected formats and ranges.
Audit Metadata