apply-podcast-preset
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected.\n- [SAFE]: The skill uses environment-standard paths and communicates with a local/configured API for legitimate configuration tasks.\n- [PROMPT_INJECTION]: The skill has a standard indirect prompt injection surface for media management.\n
- Ingestion points: Player identifiers derived from user input in SKILL.md.\n
- Boundary markers: None specified for player input.\n
- Capability inventory: File-write operations for state tracking and network configuration updates (PUT /api/config/players/).\n
- Sanitization: Path construction using player slugs is a common functional requirement for this use case but represents a potential path traversal surface if identifiers are not validated before being used in the filename
$DATA_ROOT/state/last-dsp-<player-slug>.json.
Audit Metadata