Skip to content
Back to skills

Plugin Spotify

ASecurity

Play and control the user's music on Spotify.

  • 161 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 10, 2026
ai-agentsgospring

Security analysis

A100/100

Scanned October 10, 2026

npx -y skills add Dodaios/Dodaios --skill plugin-spotify --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Plugin Spotify?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Plugin Spotify
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/dodaios-plugin-spotify/badge)](https://www.skillsdirectory.com/skills/dodaios-plugin-spotify)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
schema_version: "1"
name: plugin-spotify
description: Play and control the user's music on Spotify.
when_to_use: Use when the user wants music — start a song, artist, album or playlist, pause, skip, go back, change the volume, queue something up, or ask what is playing right now.
category: media
plugin_id: spotify
intent_verbs: [spiel, spiele, abspielen, pausier, pausiere, stopp, stoppe, überspring, überspringe, skip, weiter, zurück, play, pause, resume, next, previous, queue, turn, pon, reproduce, pausa, salta, siguiente]  # i18n-allow: spoken-input vocabulary, de/en/es — bare volume verbs (lauter/leiser/sube/baja) stay out: a volume word alone is the system's volume (local-action gate); "Musik leiser" still fires via the trigger
intent_objects: [spotify, musik, music, música, lied, song, canción, track, titel, album, álbum, playlist, wiedergabeliste, lista, künstler, artist, artista, band, radio, lautstärke, volume, volumen]  # i18n-allow: spoken-input vocabulary, de/en/es
triggers:
  - type: voice
    pattern: '(spotify|musik|music|música)'  # i18n-allow: spoken-input vocabulary
  # Play-verb + a music noun ("play a song" / "Lied abspielen") — the bare
  # noun is not a trigger (a question about a song is not a play request).
  # Generic capture lands here, then music_service swaps to the preferred
  # connected connector.
  - type: voice
    pattern: '(spiel\w*|play|abspielen|pon|reproduce).{0,48}(lied|song|titel|track|playlist|album|canción)|(lied|song|titel|track|playlist|album|canción).{0,24}(spiel\w*|play|abspielen|pon|reproduce)'  # i18n-allow: spoken-input vocabulary, de/en/es
requires_tools: [spotify]
risk_policy:
  default_tier: monitor
---

Use the connected Spotify to play and steer the user's music.

- Play by name, not by id: pass what the user said as `query` and set `type` to what they meant — `track` for a song, `artist` for a band, `album`, or `playlist` for "my running playlist". The tool searches and plays the top hit in one step.
- "Play" with no name resumes what is paused. Do not search for something to fill the gap.
- Say what actually started. The result carries the track and artist Spotify matched, which is often not literally what the user said — reporting it is how they catch a wrong hit immediately.
- Spotify plays through a device, not through this app. If nothing is open anywhere, say exactly that and offer to open Spotify — do not report it as an error or a broken connection. When several devices are idle, ask which one instead of picking.
- Controlling playback needs Spotify Premium. On that refusal, name it as Spotify's rule and stay useful: reading what is playing still works on a free account.
- Volume is a percentage from 0 to 100. "Quieter" is a step down from the current level, not a jump to zero — read the state first if you do not know it.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.