Skip to main content

pp-podcast-goat

Extracts speaker-labeled transcripts from podcasts, enabling easy access to long-form content for analysis and summarization.

Install this skill

or
77/100

Security score

The pp-podcast-goat skill was audited on Jun 7, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 289

Webhook reference - potential data exfiltration

SourceSKILL.md
289| `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) |
medium line 291

Webhook reference - potential data exfiltration

SourceSKILL.md
291Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.
medium line 277

Access to hidden dotfiles in home directory

SourceSKILL.md
277Entries are stored locally at `~/.podcast-goat-pp-cli/feedback.jsonl`. They are never POSTed unless `PODCAST_GOAT_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `PODCAST_GOAT_FEEDBACK_AUTO
low line 76

External URL reference

SourceSKILL.md
76podcast-goat-pp-cli episode get https://www.hubermanlab.com/episode/example --explain
low line 90

External URL reference

SourceSKILL.md
90podcast-goat-pp-cli source compare https://www.acquired.fm/episodes/vanguard --json
low line 106

External URL reference

SourceSKILL.md
106podcast-goat-pp-cli episode get 'https://www.youtube.com/watch?v=EXAMPLE' --bilingual zh-Hans,en
low line 161

External URL reference

SourceSKILL.md
161https://www.dwarkesh.com/p/andrej-karpathy \
low line 162

External URL reference

SourceSKILL.md
162https://open.spotify.com/episode/<id> \
low line 163

External URL reference

SourceSKILL.md
163https://www.acquired.fm/episodes/<slug> \
low line 204

External URL reference

SourceSKILL.md
204podcast-goat-pp-cli episode get https://www.dwarkesh.com/p/andrej-karpathy --md --out karpathy.md
low line 212

External URL reference

SourceSKILL.md
212podcast-goat-pp-cli source compare https://www.acquired.fm/episodes/vanguard --json
Scanned on Jun 7, 2026
View Security Dashboard
Installation guide →