Podcast Automation

• Analyzed: May 12, 2026, 12:16 AM
• Findings: 1
• Version: 3.0.0
• Hash: eeac1afbe7c0707013a583be0bbd9c11852e1f9d3cfd9c09c27bb1c9e28b29c3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The podcast-automation skill bundle provides a legitimate workflow for downloading podcasts, transcribing them using OpenAI's Whisper, controlling Sonos speakers, and archiving notes to Feishu Wiki. It uses standard tools (curl, yt-dlp, whisper, sonoscli) and follows best practices for secret management by using environment variables for Feishu API credentials. No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or the archive-to-wiki.sh script.