podwise-podcast-copilot
v0.2.0Podcast copilot workflows with podwise CLI: search podcasts or episodes by keyword, monitor followed shows for new releases, find current popular episodes, a...
⭐ 0· 113·0 current·0 all-time
by@skoowoo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description match the instructions: the SKILL.md is a CLI-driven podcast copilot that runs podwise commands (search, ask, process, get, list, popular). Nothing in the skill's content requests access to services or credentials unrelated to Podwise or handling podcast/audio inputs.
Instruction Scope
Instructions tell the agent to run podwise commands and to inspect podwise help and podwise config show. This is appropriate for a CLI helper, but podwise config show may surface API key/credentials or other sensitive config. The runtime also includes uploading local audio/video files (podwise process <file>), which sends local data to Podwise — the skill correctly requires confirmation before doing so, but users should be aware of the privacy/quotas implications.
Install Mechanism
No install spec or external downloads are included (instruction-only skill). This is low-risk: nothing is written to disk by the skill package itself and it relies on an existing podwise binary.
Credentials
The skill metadata declares no required env vars, yet the instructions assume an API key is configured for the podwise CLI. This is coherent if CLI auth is stored in a local config rather than environment variables, but it's a mismatch with the metadata: the skill doesn't declare where or how credentials are stored. Users should verify where podwise holds credentials (config files, keychain, env) before running commands that reveal or use them.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not include installation steps that modify other skills or global agent settings. Autonomous invocation is allowed (platform default) and is appropriate for this helper.
Assessment
This is an instruction-only helper for the Podwise CLI and appears coherent with that purpose, but before installing/using it: (1) ensure you have the official podwise CLI from a trusted source; (2) be aware that running `podwise config show` may reveal API keys or sensitive settings — check where Podwise stores credentials (config file, keychain, or env vars) and whether you are comfortable exposing them to the agent; (3) the skill will upload local audio/video if you confirm processing — only upload files you are comfortable sending to Podwise and confirm quota/privacy costs when prompted; (4) if you need stronger guarantees, run the podwise commands yourself (or inspect outputs) rather than allowing the agent to run them autonomously. If any of these are unacceptable, do not enable the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97650s65rjpa77485xcb7fgxh838a6d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.