Podcast Insider Top-10

• Outcome: Pass
• Latest audit: May 28, 2026 at 11:38 AM UTC
• Version:
  1.0.0

Overview

This is a transparent podcast-news briefing skill that only instructs the agent to fetch public RSS feeds and use web search for context.

Install this if you want podcast industry briefings based on public RSS feeds and web search. Be aware it may browse external sources when invoked, and verify important business claims from the linked primary sources.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 84% confidence
• Finding: The example trigger phrase "Podcast industry news" is broad enough that it could match ordinary user conversation and invoke the skill unintentionally. In an agent environment with automatic skill routing, this can cause unexpected web access, content fetching, and synthesized outputs without the user clearly intending to use this specific skill.

VirusTotal

66/66 vendors flagged this skill as clean.