← 返回 Skills 市场
449
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install podcast-discovery
功能描述
Podcast discovery for Wherever.Audio -- find shows and episodes, generate wherever.audio links.
安全使用建议
This skill appears coherent and limited to podcast discovery: it will call the public Clawsica API and fetch RSS feeds (network activity). It requires no secrets and has no install script, but includes a small Python utility you may need to run (pip install -r scripts/requirements.txt) if you want episode search locally. If you plan to enable web-search behavior implied by the docs, confirm which web/search tool the agent will use. As always, run included scripts in a controlled environment if you plan to execute them locally, and verify the Clawsica host (https://clawsica.wherever.audio) is trusted before relying on links returned by the skill.
功能分析
Type: OpenClaw Skill
Name: podcast-discovery
Version: 0.0.4
The skill is classified as suspicious due to a potential Server-Side Request Forgery (SSRF) vulnerability in `scripts/search_feed_episodes.py`. The script uses `urllib.request.urlopen` to fetch RSS feeds from a URL provided as a command-line argument. While the `SKILL.md` explicitly instructs the AI agent to only use RSS URLs obtained from the trusted Clawsica service, a sophisticated prompt injection attack could potentially bypass this instruction, allowing an attacker to coerce the agent into fetching content from arbitrary internal or external URLs via the `rss-url` parameter, leading to SSRF. There is no evidence of intentional malicious behavior such as data exfiltration or backdoors.
能力评估
Purpose & Capability
Name/description, SKILL.md, and included scripts all focus on locating podcast RSS feeds, selecting episodes, and constructing wherever.audio links. No unrelated credentials, binaries, or config paths are required.
Instruction Scope
Runtime instructions direct the agent to query the public Clawsica endpoint and to fetch arbitrary RSS feed URLs (via the provided local script) — this is appropriate for the stated purpose. The SKILL.md also says to "search the web first" for discovery queries but does not prescribe a specific external search API; this is a minor vagueness (the agent may use its available web/search tool). The instructions explicitly forbid sending raw RSS XML to the model and limit token usage, which aligns with the token-budget policy.
Install Mechanism
There is no install spec (instruction-only), and included Python tooling has a small requirements.txt (feedparser, rapidfuzz, pytest). No downloads from untrusted URLs or archive extraction are present. Semantic rerank optionally imports heavy ML libs but those are not required and the code falls back safely if absent.
Credentials
The skill declares no required environment variables or credentials. All network calls are to public endpoints (Clawsica and arbitrary RSS URLs) appropriate to the skill's function. No secret exfiltration or unrelated credential access is requested.
Persistence & Privilege
The skill does not request permanent inclusion (always=false), does not modify other skills or global agent config, and does not require elevated system privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install podcast-discovery - 安装完成后，直接呼叫该 Skill 的名称或使用
/podcast-discovery触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.0.4
- Major update: Migrated to a new implementation with a local feed tooling pipeline for episode lookup, to reduce token usage.
- Added local script (search_feed_episodes.py) for searching, filtering, and ranking podcast episodes from RSS feeds.
- New policies: "link-first" action policy (prioritizing link generation over metadata or further questions) and strict token budget for responses.
- Updated workflow and response guidelines to use local tools and compact outputs (no raw XML or large blobs).
- Added developer/testing instructions and requirements for running feed tooling locally.
- Clarified episode/show link construction, response format, and user query triggers.
v0.0.1
- Initial release of "clawpod", a podcast discovery skill for Wherever.Audio.
- Supports natural-language search for podcast shows and episodes, returning direct wherever.audio links.
- Classifies queries by intent and scope to tailor search (podcast show vs. episode).
- Integrates with Clawsica API for authoritative RSS feed discovery.
- Provides step-by-step workflow—search, RSS parsing, and link generation.
- Includes detailed usage instructions, privacy notes, and sample prompts.
元数据
常见问题
Podcast Discovery 是什么？
Podcast discovery for Wherever.Audio -- find shows and episodes, generate wherever.audio links. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 449 次。
如何安装 Podcast Discovery？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install podcast-discovery」即可一键安装，无需额外配置。
Podcast Discovery 是免费的吗？
是的，Podcast Discovery 完全免费（开源免费），可自由下载、安装和使用。
Podcast Discovery 支持哪些平台？
Podcast Discovery 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Podcast Discovery？
由 aegrumet（@aegrumet）开发并维护，当前版本 v0.0.4。
推荐 Skills