scientific-podcast-summary

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/main.py

No clear malicious payload or intentional sabotage is present. The code is a podcast scraping and LLM summarization tool. The primary security concerns are arbitrary URL fetching through --url (potential SSRF), sending fetched content and the API key-authenticated request to a configurable OPENAI_BASE_URL, and unrestricted caller-selected file output. The supplied fragment also contains a syntax error at `SUMMARY_PROMPT =`, preventing execution as written.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 23, 2026, 04:50 PM
Package URL
pkg:socket/skills-sh/aipoch%2Fmedical-research-skills%2Fscientific-podcast-summary%2F@d51c5a6e4f15b1114268b1f3d69a350aeac9cb10a6a2a9a8b3aaa27cf62c26f2