← 返回 Skills 市场
667
总下载
2
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install podcasts
功能描述
Track and synthesize podcasts with subscriptions, briefings, progress tracking, and smart alerts for new episodes and guests.
安全使用建议
This skill appears to do what it says (subscribe, summarize, prioritize), but it also relies on downloading audio/video and creating transcripts from multiple sources. Before installing or enabling it, check the following:
- Confirm whether the agent environment already has yt-dlp, Whisper (or other transcription tools), and whether you trust their installation sources; if not, ask the author how they expect those tools to be provided.
- Ask what third-party APIs are used (Podcast Index, Apple, Taddy, YouTube) and whether API keys are required; never supply credentials unless you understand why and how they will be stored and used.
- Be aware the skill will write data under ~/podcasts/ (transcripts, briefings, guest watchlists). Decide if you are comfortable storing potentially copyrighted audio and auto-generated transcripts locally and confirm how to delete that data.
- Clarify how often the skill will scan/ download content and whether it will monitor 'all podcasts' automatically—this impacts bandwidth, rate limits, and privacy.
- If you proceed, prefer installing required tools (yt-dlp, Whisper) from official project sources, and limit credentials to least privilege. If the author cannot explain the missing dependency/credential declarations, treat the skill cautiously or avoid installing it.
功能分析
Type: OpenClaw Skill
Name: podcasts
Version: 1.0.0
The skill is classified as suspicious due to the explicit mention of executing external command-line tools like `yt-dlp` and Whisper for transcription in `briefings.md`. While these tools are legitimate, their execution by an AI agent implies shell access or a mechanism to run external programs. This capability introduces a significant remote code execution (RCE) vulnerability if inputs (e.g., URLs for `yt-dlp`) are not rigorously sanitized, potentially allowing shell injection. There is no evidence of malicious intent, but this represents a critical security flaw.
能力评估
Purpose & Capability
The name/description (track and synthesize podcasts) matches the instructions to subscribe, summarize, and manage a backlog. However, the SKILL.md explicitly lists external tools and data sources (yt-dlp, Whisper, Apple transcripts, Taddy/Podcast Index) that a real implementation would likely need; the skill metadata lists no required binaries, installs, or credentials, which is inconsistent with those stated needs.
Instruction Scope
Instructions direct the agent to download/obtain transcripts and audio (yt-dlp, Whisper, YouTube auto-captions) and to monitor 'any podcast' for VIP guests and trending content. That can require broad network access, repeated downloads, and scraping of multiple platforms. The instructions also mandate writing summarized data and transcripts to ~/podcasts/, which is a clear local storage behaviour the user should know about. There is no guidance about rate limiting, frequency, or consent for downloading content.
Install Mechanism
This is an instruction-only skill (no install spec), which is low risk in itself. But because the SKILL.md assumes tools like yt-dlp and Whisper are used, the lack of declared required binaries or an install method is an inconsistency: the agent may fail at runtime or implicitly rely on preinstalled third-party tooling from unknown sources.
Credentials
The skill declares no required environment variables or credentials, yet references services (Apple transcripts, Podcast Index, third-party services named 'Taddy') that commonly require API keys or credentials. The SKILL.md does not describe what credentials (if any) are needed, where they should be stored, or whether private keys/tokens will be used—this is disproportionate opacity for a skill that interacts with third-party APIs and downloads content.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It instructs storing files under ~/podcasts/ (subscriptions.md, queue.md, briefings/, knowledge.md, guests.md). Local persistence limited to a dedicated directory is normal, but the user should be aware transcripts and possibly full episode audio may be saved there. The skill does not declare modifying other skills or system settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install podcasts - 安装完成后，直接呼叫该 Skill 的名称或使用
/podcasts触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Podcasts 是什么？
Track and synthesize podcasts with subscriptions, briefings, progress tracking, and smart alerts for new episodes and guests. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 667 次。
如何安装 Podcasts？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install podcasts」即可一键安装，无需额外配置。
Podcasts 是免费的吗？
是的，Podcasts 完全免费（开源免费），可自由下载、安装和使用。
Podcasts 支持哪些平台？
Podcasts 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Podcasts？
由 Iván（@ivangdavila）开发并维护，当前版本 v1.0.0。
推荐 Skills