Security audit
Security checks for vulnerabilities and agentic risk
This skill is a podcast downloader, but its metadata and shell workflow are too loosely scoped for automatic use without review.
Review before installing. Only use it for explicit Xiaoyuzhou podcast download requests, confirm the output directory, and do not let it run ./scripts/download.sh unless the intended script is actually present and trusted. Set KEEP_M4A=true if you want to preserve original audio files.
The manifest describes this skill as suitable for code generation, debugging, and deployment, while the actual documented behavior is downloading and converting podcast media. This mismatch can cause the agent to invoke the skill in unrelated technical contexts, increasing the chance of unnecessary file writes and shell execution through Bash-enabled workflows.
The trigger keywords include very broad terms such as 'show', 'downloader', and generic Chinese fragments, which can cause unintended activation in unrelated conversations. In a skill with Read/Write/Edit/Bash permissions, accidental invocation materially increases risk because the agent may execute commands or modify files when the user did not intend to use this downloader.
The workflow explicitly deletes the original m4a after conversion, but the skill description does not clearly warn users about this destructive default. In a media-downloading skill, silent deletion can cause irreversible data loss if conversion is faulty, metadata is lost, or the user expected to preserve source files for archival or troubleshooting.
No suspicious patterns detected.
