ClawHub
Back to skill

Security audit

Spotify Ads CLI

Security checks across malware telemetry and agentic risk

Overview

The skill is mostly coherent as a Spotify Ads helper, but it under-describes side effects by calling the CLI read-only while documenting commands that create remote report jobs and suggesting asset or audience management.

Review before installing. Use it only with Spotify Ads accounts where you are comfortable granting reporting access, and require explicit confirmation before commands that create CSV reports or manage audiences/assets. The concern is inaccurate scoping and persistence, not artifact-backed theft or destruction.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Intent-Code Divergence

Medium
Confidence
94% confidence
Finding
The skill claims the CLI is read-only, but later documents `csv-report` as a POST request that creates a server-side report job. That mismatch is dangerous because users or downstream agents may authorize execution under a false assumption of non-mutating behavior, weakening safeguards around side-effecting operations.

Session Persistence

Medium
Category
Rogue Agent
Content
# Spotify Ads CLI Skill

You have access to `spotify-ads-cli`, a read-only CLI for the Spotify Ads API (v3). Use it to query businesses and ad accounts, pull aggregate and insight reports, create async CSV reports, estimate audience sizes and bid ranges, explore targeting options, manage audiences and assets, and track measurement pixels and datasets.

## Quick start
Confidence
84% confidence
Finding
The skill advertises capabilities to create async CSV reports and manage assets/audiences while simultaneously describing the tool as read-only. Even if these actions do not alter advertising campaigns directly, they create persistent server-side artifacts or perform account-affecting operations, which can outlive the session and violate least-surprise assumptions.

Session Persistence

Medium
Category
Rogue Agent
Content
#### CSV report (async)

Create an async CSV report and poll for status.

```bash
# Create an async CSV report (POST request)
Confidence
91% confidence
Finding
`csv-report` explicitly creates an asynchronous report via POST and instructs polling until completion, which means the command causes persistent server-side work and generates downloadable output beyond the immediate session. This is a real session-persistence concern because repeated or unapproved invocations could create unnecessary artifacts, consume service resources, or expose data through generated report URLs.

VirusTotal

59/59 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.