Podcast Hosting Expert
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [COMMAND_EXECUTION] (INFO): The skill utilizes the Bash tool for demonstrating interaction with the Transistor.fm API. The provided
curlcommands are standard for the domain and use the placeholderYOUR_API_KEYfor authentication, preventing hardcoded credential leaks. - [DATA_INGESTION] (LOW): The skill identifies an attack surface for Indirect Prompt Injection (Category 8) by describing workflows that fetch and parse external RSS feeds using the
WebFetchtool. - Ingestion points: External RSS feeds (e.g.,
https://feed.example.com/podcast.rss). - Boundary markers: Absent; the skill does not define specific delimiters for separating the external feed data from agent instructions.
- Capability inventory:
Bash,Edit, andWebFetch. While high-capability, they are used here for documentation purposes. - Sanitization: Not specified in the provided code snippets or instructions.
- Severity Assessment: LOW. The skill primarily facilitates data display and reasoning about podcast content rather than automated high-privilege side effects based on feed contents.
Audit Metadata