by 安全扫描
OpenClaw
安全
high confidenceThe skill's files and runtime instructions match its stated purpose (downloading episodes from xiaoyuzhoufm, converting to MP3, and saving show notes) and do not request unrelated credentials or perform unexpected network exfiltration.
评估建议
This skill appears to do exactly what it claims: parse episode pages, download the audio from the podcast CDN, convert to MP3, and save shownotes to disk. Before installing or running: (1) inspect scripts/download.sh yourself (it will write files into PODCAST_DIR and execute curl/ffmpeg commands); (2) ensure ffmpeg and jq are installed; (3) change PODCAST_DIR if you don't want downloads placed into a cloud-synced Documents folder; (4) confirm you have the right to download and store the podcast ...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, reference.md and scripts/download.sh are coherent: they parse __NEXT_DATA__ from xiaoyuzhoufm pages, download the enclosure URL (media.xyzcdn.net), convert m4a→mp3 with ffmpeg, and save shownotes. No unrelated services, credentials, or binaries are requested.
✓ 指令范围
Runtime instructions and the script only fetch web pages and media from xiaoyuzhoufm/CDN, convert audio, and write files to the user-specified PODCAST_DIR. They do not read unrelated system files, access other env vars, or send data to unexpected endpoints.
✓ 安装机制
No install spec; this is an instruction-only skill with a bundled bash script. Nothing is downloaded or installed by the skill itself.
✓ 凭证需求
No credentials or secret environment variables are required. Declared env vars (PODCAST_DIR, AUDIO_QUALITY, KEEP_M4A) are appropriate for the task. The default directory is a user Documents path (not a secret).
✓ 持久化与权限
The skill does not request always:true, does not modify other skills or global agent settings, and has no persistent/background components. It only runs the included script when invoked.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/11
Initial release. Download podcast audio and show notes from xiaoyuzhoufm.com with automatic MP3 conversion for Bluetooth headphone compatibility. Supports single and batch downloads, custom audio quality, and show notes extraction.
● 无害
安装命令
点击复制官方npx clawhub@latest install podcast-downloader
镜像加速npx clawhub@latest install podcast-downloader --registry https://cn.longxiaskill.com