Podcast Agent

• Analyzed: Apr 2, 2026, 6:46 AM
• Findings: 1
• Version: 1.0.2
• Hash: b605124a2caccd3fb429d3e7225546bf64b15b88be7e3bd3c62a7983dce1cf23
• Source: palm
• External report: View on VirusTotal

Findings (1)

The podcast-agent skill is a legitimate tool designed to convert web articles into audio podcasts using edge-tts. The core logic in scripts/podcast_gen.py includes proactive security measures, such as a robust SSRF validation function that blocks access to internal hostnames and private IP ranges. The script handles subprocess execution safely without shell=True, and the instructions in SKILL.md are consistent with the stated purpose without any evidence of prompt injection or malicious intent.