Spotify

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 14cacf615f16dbefefc00d4cabc7166d8cfbd72a030cc583a8f347816d4cd7e2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. It instructs the installation of `spogo` and `spotify_player` via `brew`, which is a standard package manager. The most sensitive instruction in `SKILL.md` is `spogo auth import --browser chrome`, which accesses browser cookies for authentication. While accessing browser data is a high-risk capability, this command is a legitimate and documented feature of the `spogo` tool, directly serving the stated purpose of authenticating the Spotify player without evidence of exfiltration or malicious intent from the skill bundle itself.