Podcast Notes
v2.0.1播客大纲、Show Notes生成、开场白、嘉宾问题、变现策略、分发渠道。Podcast assistant with outlines, show notes, intro scripts, guest questions, monetization strategies.
⭐ 0· 361·1 current·1 all-time
bybytesagain4@xueyetianya
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (podcast outlines, show notes, hooks, hashtags, exports) match the included script and SKILL.md. Required tools (bash, common Unix utilities) are appropriate and proportional; no unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md and the script limit activity to reading/writing log files under ~/.local/share/podcast-notes, showing stats, searching logs, and exporting data. There are no instructions to read unrelated system files, access remote endpoints, or exfiltrate data.
Install Mechanism
No install spec is provided (instruction-only), and the shipped implementation is a plain bash script. That is low-risk compared with downloading/executing remote payloads. Note: the repository includes the script file but does not provide an automated installer.
Credentials
The skill requests no environment variables or credentials. It uses $HOME to create a per-user data directory, which is expected. There are no unrelated secret or config path requirements.
Persistence & Privilege
The skill is user-invocable only (always:false) and does not request elevated privileges or modify other skills or system configs. It writes only to a per-user data directory.
Assessment
This skill appears to do what it says: a local CLI that stores timestamped plain-text logs in ~/.local/share/podcast-notes and can export them to export.json/csv/txt. Before installing or running: 1) Be aware all inputs are stored unencrypted in your home directory—do not paste secrets or personal data you wouldn't want persisted. 2) Exports are written to the same data directory; review exported files before sharing. 3) The script uses standard tools (grep, date, wc); search uses grep with the search term you provide (grep will interpret the pattern), and JSON export appears to write raw values (may not escape quotes), so exported data could be malformed if entries contain arbitrary quotes/newlines—inspect exports if correctness matters. 4) The repository includes the bash script but no installer; installing typically requires copying the script into your PATH. 5) I inspected the provided files but the script output you supplied was truncated at the end, so I couldn't verify the final lines; if you want higher confidence, provide the complete script for review. Overall, there is no evidence of network calls or credential access and the behavior is consistent with the stated purpose.Like a lobster shell, security has layers — review code before you run it.
chinesevk97ewc4am7zwwhcce4y9r0mh2x82pf89latestvk9707qrhpk67f8wht7h0q0nprn834gzmproductivityvk97ewc4am7zwwhcce4y9r0mh2x82pf89
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
