Security audit

spotify-download

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed playlist-downloader guide whose file writes, network use, external tools, and optional Spotify credentials fit its stated purpose.

Before installing, verify the spotify-download package or GitHub repository, use uvx or pipx isolation where practical, install ffmpeg from a trusted source, and save downloads only to a directory you intend to use. Avoid passing Spotify client secrets in commands that may be saved or logged; prefer careful environment handling and redact secrets from any agent output.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill instructs the agent to download playlist metadata and MP3 files and write them into user-specified directories, but it does not clearly warn the user that it will create files on disk and may reuse existing files via skip/validation behavior. In an agent setting, silent filesystem writes and reuse of prior artifacts can surprise users, overwrite expectations, or cause unintended handling of stale/local content.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The skill suggests passing Spotify client credentials on the command line or via environment variables without warning about exposure risks. Command-line secrets may be visible in shell history, process listings, logs, or agent traces, which can leak sensitive API credentials.

Static analysis

No suspicious patterns detected.