Text to Published Podcast RSS
PassAudited by ClawScan on May 16, 2026.
Overview
This instruction-only skill does what it claims—turns text into a published podcast episode—but users should understand that it uses a Cast0 API key and publishes content to a no-auth RSS feed.
Before installing, make sure you are comfortable sending episode text to Cast0 and having generated audio appear in a public no-auth RSS feed. Keep the API key private, do not commit the .env file, and only invoke the create-episode API for content you intend to publish.
Publisher note
When the episode is published, it stays in unguessable RSS url. So if user dont share the url, it stays private.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Text sent through the create-episode API can become a published podcast episode.
Creating an episode mutates the Cast0 account/feed and publishes user-provided content. This is purpose-aligned and disclosed, but it is a public-output action users should approve intentionally.
Episodes auto-publish to an RSS feed compatible with Apple Podcasts, Spotify, Overcast, and other podcast apps.
Only create episodes from text the user intends to publish, and confirm the title, text, and target podcast before making the POST request.
Anyone with the API key may be able to create or list episodes for the associated podcast, depending on Cast0 permissions.
The skill uses a bearer API key tied to a podcast account. That is expected for the integration, but it is a sensitive credential and the registry metadata does not declare a primary credential or required env var.
Auth: `Authorization: Bearer pk_xxxxx` ... Each API key is tied to one podcast. Once you have the key, save it: `echo "CAST0_API_KEY=pk_xxxxx" >> .env`
Store the API key securely, avoid committing .env files, rotate the key if exposed, and use a key scoped only to the intended podcast.
Podcast episode content and audio may be accessible to anyone who has or discovers the feed URL, and may be pulled into podcast apps.
The skill sends user text to an external provider and publishes the resulting audio through a no-auth RSS URL. The data flow is disclosed, but users should not treat the feed as confidential.
Every podcast has a public feed URL (no auth): `https://api.cast0.ai/rss/FEED_TOKEN`
Do not send private, confidential, or regulated text unless the user accepts Cast0 processing and public RSS distribution.