Podcast Workflow
v1.0.0Full podcast post-production pipeline. Give it a transcript or audio URL and it produces show notes, chapter markers, social media clips, SEO title/descripti...
⭐ 0· 35·1 current·1 all-time
by@ash2hsa
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (podcast post‑production) match the runtime instructions: ingest transcript or URL, generate show notes, chapters, social posts, SEO metadata, and a newsletter blurb. The only external requirement is curl, which is reasonable for fetching a provided URL.
Instruction Scope
Instructions remain within the stated purpose. One operational gap: the skill tells the agent to 'use curl to fetch the page and extract any available transcript or description' but gives no concrete method for extracting transcripts from services like YouTube or Spotify (may require APIs or more advanced scraping). Also, fetching arbitrary user-provided URLs means the agent will make outbound HTTP requests (expected for this use case but worth noting for privacy/SSRF/logging concerns).
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk installation footprint. README mentions a 'clawhub install' command, but that is documentation-only; there is no automated install step in the package metadata.
Credentials
No environment variables, credentials, or config paths are requested. This is proportionate to the stated purpose (processing transcripts / fetching public URLs).
Persistence & Privilege
always is false and there are no special privileges requested. The skill can be invoked autonomously by the agent (platform default), which is expected behavior for a user-invocable workflow skill and is not combined with other red flags.
Assessment
This skill appears internally consistent and doesn't ask for secrets or installs. Before installing or using it, consider: 1) Do not paste sensitive or private transcript content you wouldn't want processed by the agent. 2) If you supply a URL, the agent will make outbound HTTP requests (those requests will be visible to the remote host in server logs and may be subject to network policies); avoid giving private/internal URLs to prevent SSRF/exposure. 3) Extraction from YouTube/Spotify may be unreliable using only curl — expect imperfect transcript retrieval for some URLs. 4) The README mentions a clawhub install command but the registry entry has no install spec; this is a documentation inconsistency rather than a security problem. If any of these concerns matter for your environment, test the skill with non-sensitive content first or request additional implementation details from the skill author.Like a lobster shell, security has layers — review code before you run it.
automationvk974b596zx2rnx06vj3q03q92d84889mlatestvk974b596zx2rnx06vj3q03q92d84889mpodcastvk974b596zx2rnx06vj3q03q92d84889mshow-notesvk974b596zx2rnx06vj3q03q92d84889msocial-mediavk974b596zx2rnx06vj3q03q92d84889m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎙️ Clawdis
Binscurl