OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
The Spotify Automation skill is a functional extension for music management. It does not contain malicious code, hardcoded credentials, or suspicious network operations. It is assessed as LOW severity due to the presence of indirect prompt injection surfaces where untrusted data, such as user-provided playlist names or search results, are interpolated into high-privilege playback and playlist management tools without explicit sanitization.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed