pp-podscan
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
podscan-pp-clibinary usingnpxfrom the@mvanhorn/printing-presspackage or viago installfrom the author's GitHub repository. - [COMMAND_EXECUTION]: The skill executes the
podscan-pp-clitool to manage alerts, search episodes, and interact with the Podscan API. - [DATA_EXFILTRATION]: The tool includes an output delivery feature (
--deliver webhook:<url>) that can transmit command results to external webhooks. This is a functional capability of the CLI that could be used to send data to remote servers. - [PROMPT_INJECTION]: The skill provides access to untrusted content from podcast transcripts, presenting an indirect prompt injection surface.
- Ingestion points: Podcast transcripts and metadata are retrieved via
podscan-pp-cli episodes searchandpodscan-pp-cli podcasts searchcommands. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the podcast data.
- Capability inventory: The agent can write to local files and send data to webhooks using the CLI's
--deliverflag, which are powerful capabilities if triggered by malicious transcript content. - Sanitization: There is no evidence of sanitization or filtering of external content before it is processed by the agent.
Audit Metadata