assets

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a media skill usually calls an AI service over the internet.

By spotify/ads-claude-plugin (GitHub) · media · 20 stars · scanned at commit 65d6776

Upload, list, and manage Spotify Ads API creative assets — audio, video, and images for ad campaigns.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. It runs automatically when the plugin is installed.

Found in 15 places.

skills/assets/SKILL.md, line 17PLUGIN_ROOT="${CODEX_PLUGIN_ROOT:-${CLAUDE_PLUGIN_ROOT:-.}}"
skills/assets/SKILL.md, line 58api POST "ad_accounts/{ad_account_id}/assets" \
skills/assets/SKILL.md, line 71FILE_SIZE=$(stat -f%z "/path/to/file" 2>/dev/null || stat --printf="%s" "/path/to/file" 2>/dev/null || wc -c < "/path/to/file")

Show 12 more

skills/assets/SKILL.md, line 77curl -s -X POST -H "Authorization: Bearer $TOKEN" \
skills/assets/SKILL.md, line 89curl -s -X POST -H "Authorization: Bearer $TOKEN" \
skills/assets/SKILL.md, line 99CHUNK_DIR=$(mktemp -d)
skills/assets/SKILL.md, line 105curl -s -X POST -H "Authorization: Bearer $TOKEN" \
skills/assets/SKILL.md, line 115curl -s -X POST -H "Authorization: Bearer $TOKEN" \
skills/assets/SKILL.md, line 125rm -rf "$CHUNK_DIR"
skills/assets/SKILL.md, line 133api GET "ad_accounts/{ad_account_id}/assets/$ASSET_ID"
skills/assets/SKILL.md, line 159api GET "ad_accounts/{ad_account_id}/assets?asset_types=AUDIO&limit=50&sort_direction=DESC"
skills/assets/SKILL.md, line 183api GET "ad_accounts/{ad_account_id}/assets/$ASSET_ID"
.claude-plugin/hooks.json, line 10"command": "bash \"${CODEX_PLUGIN_ROOT:-${CLAUDE_PLUGIN_ROOT:-.}}/hooks/check-token.sh\"",
.codex-plugin/hooks.json, line 10"command": "bash \"${PLUGIN_ROOT}/hooks/check-token.sh\"",
hooks.json, line 9"command": "bash \"${extensionPath}${/}hooks${/}check-token.sh\"",

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a media skill.

Found in 5 places.

skills/assets/SKILL.md, line 77curl -s -X POST -H "Authorization: Bearer $TOKEN" \
skills/assets/SKILL.md, line 89curl -s -X POST -H "Authorization: Bearer $TOKEN" \
skills/assets/SKILL.md, line 105curl -s -X POST -H "Authorization: Bearer $TOKEN" \

Show 2 more

skills/assets/SKILL.md, line 115curl -s -X POST -H "Authorization: Bearer $TOKEN" \
hooks/lib/attribution.sh, line 88out="${out}${before}curl ${extra}"

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'assets' ] || [ -L ~/.agents/skills/'assets' ]; then echo 'A skill folder named assets already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/spotify/ads-claude-plugin' "$d" && git -C "$d" checkout --quiet '65d6776eef29b51f9e11f33a083845b6e78f5335' -- 'skills/assets' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/assets' ~/.agents/skills/'assets' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'assets' ~/.claude/skills/'assets' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for spotify/ads-claude-plugin shows the score of its lowest-scoring skill.

SkillTrust badge for spotify/ads-claude-plugin

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/spotify/ads-claude-plugin.svg)](https://zalavijaysinh.github.io/skilltrust/repos/spotify/ads-claude-plugin/)

Score history

Date	Version	Score
2026-11-07	`65d6776`	92