read-podcast-workflow

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall workflow is broadly consistent with podcast processing, but its trust boundary is weak: it relies on several opaque local skills, auto-publishes to a hardcoded Feishu destination, and optionally sends content to a third-party image site. This looks more like a personal automation skill than malware, but the transitive-skill trust and unclear credential/data handling make it medium risk.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 11, 2026, 03:51 PM
Package URL
pkg:socket/skills-sh/SpaceZephyr%2Fread-buddy%2Fread-podcast-workflow%2F@7d422c6e7748331c994705bb06be89283a23114da169a71d6e2ddd0f0aff0ffa
Security Audit — socket — read-podcast-workflow