alterlab-nmc-podcast-producer
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill's behavior is consistent with its stated purpose as a podcast producer assistant.
- [DATA_EXFILTRATION]: The skill mentions web searching and file operations for research and deliverable creation. All external services referenced (Spotify, Riverside.fm, Buzzsprout, Libsyn, etc.) are well-known technology companies in the audio industry. There are no attempts to access sensitive system files or exfiltrate private user data.
- [PROMPT_INJECTION]: No direct prompt injection instructions or jailbreak attempts were found in the skill content. The skill has a surface for indirect prompt injection because it ingests data from web searches and project files (Ingestion points:
SKILL.mdworkflows), lacks explicit boundary markers for untrusted content, and has the capability to write files. However, the capability inventory is limited to content generation and file management, and it lacks high-risk execution tools like shell access, minimizing potential impact. No specific sanitization methods for ingested data are described.
Audit Metadata