Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed podcast-downloader skill with some sloppy metadata and default temporary-file deletion, but no artifact-backed malicious behavior.
Install only if you are comfortable with an agent using shell tools to download audio, run ffmpeg, and write files to a podcast directory. Review the missing referenced script before relying on it, and set KEEP_M4A=true if you want to preserve original downloads.
The manifest mixes a podcast-downloading capability with unrelated programming/code-generation usage guidance, which can cause the skill to be invoked in contexts where shell execution and file-writing are unnecessary or unexpected. This increases the chance of accidental execution of Bash-based actions under a misleading scope, weakening user consent and agent safety boundaries.
The trigger keywords are broad, fragmented, and partially unrelated, making accidental or overly eager invocation more likely. In a skill with Read/Write/Edit/Bash capabilities, unintended activation can lead to unexpected downloads, file modifications, or command execution based on weak intent matching.
The workflow explicitly deletes the original m4a file after conversion, but the skill description does not prominently warn users that destructive behavior occurs by default. In a file-handling skill, undisclosed deletion increases risk of unintended data loss, especially if conversion fails silently or the user expected archival retention.
No suspicious patterns detected.
