← 返回 Skills 市场
comicstrip

PodcastIndex

作者 ComicStrip · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
310
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install podcastindex
功能描述
Search and retrieve podcast and episode details from Podcast Index API using keywords, titles, feed IDs, URLs, or featured persons with authenticated requests.
安全使用建议
This skill appears to do what it says (talk to Podcast Index) and legitimately needs an API key and secret, but the registry listing you saw omitted those required env vars while SKILL.md includes them. Before installing: 1) verify the skill's source/homepage or ask the publisher to fix the registry metadata so required env vars are visible; 2) only provide PODCASTINDEX_API_KEY and PODCASTINDEX_API_SECRET if you trust the skill and the publisher; 3) prefer using a limited-scope/rotatable key if Podcast Index supports it and rotate keys after testing; 4) if you are uncomfortable with autonomous invocation, restrict the skill or require manual invocation; and 5) ask the developer to publish code or a trustworthy homepage so you can audit behavior further.
功能分析
Type: OpenClaw Skill Name: podcastindex Version: 1.0.0 The skill bundle is benign. It clearly defines its purpose to interact with the Podcast Index API for data retrieval, requiring specific API keys for authentication. All instructions in SKILL.md are focused on legitimate API calls to `api.podcastindex.org` and do not contain any indicators of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's intended behavior. The use of SHA-1 for authentication is part of the external API's specification, not an intentional malicious act by the skill itself.
能力评估
Purpose & Capability
The skill's stated purpose (searching Podcast Index) aligns with the actions described in SKILL.md (authenticated GET requests to api.podcastindex.org). Requiring PODCASTINDEX_API_KEY and PODCASTINDEX_API_SECRET is proportionate to that purpose. However, the registry metadata provided earlier in the listing shows no required env vars while the SKILL.md includes an embedded 'openclaw' metadata block declaring those env vars and primaryEnv. That mismatch is an incoherence the developer should fix.
Instruction Scope
SKILL.md instructions are narrowly scoped to building authenticated requests to the Podcast Index API (timestamp + SHA-1 hash, include headers, call endpoints). It does not instruct reading arbitrary files or unrelated credentials, nor to exfiltrate data to other endpoints. It does reference using Node.js modules as an implementation hint but also suggests using a built-in HTTP request tool.
Install Mechanism
There is no install spec and no code files; this is instruction-only, so nothing will be written to disk by an installer. That is lower risk and consistent with the skill's content.
Credentials
The SKILL.md requires two secrets (PODCASTINDEX_API_KEY and PODCASTINDEX_API_SECRET), which are appropriate for Podcast Index authentication. The concern is that the skill registry metadata (the top-level requirements shown to users) lists no required env vars — this omission is misleading and could cause a user to unknowingly provide credentials without realizing the skill needs them. The skill also claims primaryEnv in its embedded metadata, further highlighting the discrepancy.
Persistence & Privilege
The skill does not request permanent presence (always: false) and does not request to modify other skills or system-wide settings. Autonomous invocation is allowed (default) but that is normal for skills; nothing here amplifies privilege beyond normal behavior.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install podcastindex
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /podcastindex 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of the podcastindex skill. - Access and search podcast information using the Podcast Index API. - Search for podcasts by term, title, or person. - Retrieve podcast and episode details by feed ID, feed URL, or episode ID. - Explore trending podcasts and recent episodes. - Requires API authentication via PODCASTINDEX_API_KEY and PODCASTINDEX_API_SECRET.
元数据
Slug podcastindex
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

PodcastIndex 是什么?

Search and retrieve podcast and episode details from Podcast Index API using keywords, titles, feed IDs, URLs, or featured persons with authenticated requests. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 310 次。

如何安装 PodcastIndex?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install podcastindex」即可一键安装,无需额外配置。

PodcastIndex 是免费的吗?

是的,PodcastIndex 完全免费(开源免费),可自由下载、安装和使用。

PodcastIndex 支持哪些平台?

PodcastIndex 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 PodcastIndex?

由 ComicStrip(@comicstrip)开发并维护,当前版本 v1.0.0。

💬 留言讨论