Podcast Summarize

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward podcast summarization skill, with expected use of audio tools and optional transcription APIs that users should review before use.

This skill looks safe for its stated purpose. Before installing or using it, verify any Python packages you install, use local transcription for sensitive audio, and only provide API keys or upload audio to OpenAI if you are comfortable with that external processing.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may download or process podcast media from links the user provides.

Why it was flagged

The skill may use downloader/transcription tooling on user-provided URLs or audio sources. This is expected for podcast summarization, but users should be aware that remote content may be fetched.

Skill content
For YouTube: Use yt-dlp to extract audio
- For URLs: Download if needed
Recommendation

Use trusted links and keep download/transcription steps tied to explicit user requests.

What this means

If the API option is used, the agent or CLI may rely on the user's OpenAI account credentials.

Why it was flagged

The reference document describes optional OpenAI API credential use for Whisper transcription. This is purpose-aligned, but the key can grant access to a user account and incur usage charges.

Skill content
Set OPENAI_API_KEY environment variable
Recommendation

Use a limited API key where possible, monitor billing, and prefer local transcription for sensitive audio.

What this means

Package versions or package sources could change over time and affect the local environment.

Why it was flagged

The setup guidance asks users to install unpinned Python packages. These packages are relevant to the skill's purpose, but unpinned package installation leaves version and provenance decisions to the user.

Skill content
pip install yt-dlp
pip install openai-whisper
pip install whisper
Recommendation

Install dependencies in a virtual environment, verify official package names, and pin versions if using the skill regularly.

What this means

Private or unpublished audio could be uploaded to an external provider if the user chooses the API transcription path.

Why it was flagged

The helper script prints an optional command that would send the selected audio file to OpenAI for transcription. The script does not run it automatically, but users should understand this external data flow.

Skill content
openai audio transcriptions.create --file "$AUDIO_FILE" --model whisper-1
Recommendation

Confirm before using API transcription and use local Whisper for confidential recordings.