Pod Cog

PassAudited by ClawScan on May 1, 2026.

Overview

Pod Cog appears to be a purpose-aligned podcast production helper, but it uses a CellCog API key and sends prompts to CellCog for external agent-based generation.

Before installing, confirm you trust CellCog and the CellCog SDK, use an appropriate API key, and avoid submitting sensitive guest or business content unless you are comfortable with it being processed by CellCog. Monitor fire-and-forget jobs so they do not run longer or consume more account resources than intended.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may consume CellCog account resources and send work through the user's CellCog account.

Why it was flagged

The skill requires a CellCog API key. This is expected for a CellCog-powered production tool, but it means the agent can use the user's CellCog account credentials.

Skill content
requires:\n      bins: [python3]\n      env: [CELLCOG_API_KEY]
Recommendation

Use a scoped CellCog API key if available, monitor account usage, and avoid sharing the key outside the intended environment.

What this means

Podcast prompts, scripts, guest research details, or uploaded episode material may be sent to CellCog or the selected provider.

Why it was flagged

The skill delegates work to CellCog with an agent provider setting, indicating prompts and task content may be handled by an external agent/provider workflow.

Skill content
client = CellCogClient(agent_provider="openclaw|cursor|claude-code|codex|...")
Recommendation

Review CellCog's data handling terms and avoid submitting confidential guest, business, or unreleased content unless that external processing is acceptable.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

A podcast production request may continue running after the initial command, potentially using account resources until the task completes.

Why it was flagged

The documented OpenClaw workflow creates an asynchronous agent-mode task and reports back through a notification session. This is disclosed and fits long-running podcast generation, but users should notice the background-job behavior.

Skill content
**OpenClaw (fire-and-forget):**\n```python\nresult = client.create_chat(\n    prompt="[your task prompt]",\n    notify_session_key="agent:main:main",\n    task_label="my-task",\n    chat_mode="agent",\n)
Recommendation

Use clear task labels, monitor submitted jobs, and cancel or limit tasks if CellCog provides controls for long-running work.

What this means

The behavior ultimately depends on the CellCog SDK/package installed in the user's environment.

Why it was flagged

The skill depends on the external CellCog SDK. No malicious install behavior is shown, but the dependency is outside this instruction-only artifact.

Skill content
dependencies: [cellcog]
Recommendation

Install the CellCog SDK from the official CellCog source and keep it updated through trusted package channels.