Is mixx85/spotify-claw safe?
Yes. mixx85/spotify-claw is safe to install. Oathe's behavioral security audit gave the spotify-claw skill by mixx85 a trust score of 91/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/mixx85/spotify-claw
Is mixx85/spotify-claw safe to install?
This is a comprehensive Spotify control skill that provides extensive music management functionality through legitimate Spotify Web API integration. While it contains strong execution directives and auto-launches applications, the code appears genuine and properly implemented.
What security issues were found in mixx85/spotify-claw?
Category Scores
Findings (4)
MEDIUM Mandatory command execution directive -20 ▶
The skill contains a strong directive 'ALWAYS run python3 ~/.openclaw/scripts/spotify.py [cmd] — never respond with text only' which could override user preferences for text-only responses in some scenarios.
LOW Accesses Spotify API credentials -5 ▶
The skill reads Spotify client ID and secret from macOS Keychain, which is legitimate for its stated functionality but involves credential access.
LOW Executable Python script -10 ▶
The skill contains a comprehensive Python script that will be executed to control Spotify functionality, including system calls to launch applications.
LOW Auto-launches external application -5 ▶
The skill automatically launches the Spotify application when it's not running, which some users might find intrusive.
Should I install mixx85/spotify-claw?
Oathe's verdict for mixx85/spotify-claw is SAFE with a trust score of 91/100. Recommendation: Install.