Skip to main content

pp-podcast-goat

Extracts speaker-labeled podcast transcripts in markdown format, enabling easy access and analysis of long-form audio content.

Install this skill

or
77/100

Security score

The pp-podcast-goat skill was audited on May 26, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 284

Webhook reference - potential data exfiltration

SourceSKILL.md
284| `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) |
medium line 286

Webhook reference - potential data exfiltration

SourceSKILL.md
286Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.
medium line 272

Access to hidden dotfiles in home directory

SourceSKILL.md
272Entries are stored locally at `~/.podcast-goat-pp-cli/feedback.jsonl`. They are never POSTed unless `PODCAST_GOAT_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `PODCAST_GOAT_FEEDBACK_AUTO
low line 71

External URL reference

SourceSKILL.md
71podcast-goat-pp-cli episode get https://www.hubermanlab.com/episode/example --explain
low line 85

External URL reference

SourceSKILL.md
85podcast-goat-pp-cli source compare https://www.acquired.fm/episodes/vanguard --json
low line 101

External URL reference

SourceSKILL.md
101podcast-goat-pp-cli episode get 'https://www.youtube.com/watch?v=EXAMPLE' --bilingual zh-Hans,en
low line 156

External URL reference

SourceSKILL.md
156https://www.dwarkesh.com/p/andrej-karpathy \
low line 157

External URL reference

SourceSKILL.md
157https://open.spotify.com/episode/<id> \
low line 158

External URL reference

SourceSKILL.md
158https://www.acquired.fm/episodes/<slug> \
low line 199

External URL reference

SourceSKILL.md
199podcast-goat-pp-cli episode get https://www.dwarkesh.com/p/andrej-karpathy --md --out karpathy.md
low line 207

External URL reference

SourceSKILL.md
207podcast-goat-pp-cli source compare https://www.acquired.fm/episodes/vanguard --json
Scanned on May 26, 2026
View Security Dashboard
Installation guide →