podcast-script
将 Markdown 文章转换成 N 人播客脚本（1～4人），输出为 .txt 文件保存至当前项目的 markdown/ 目录。触发条件：用户提到"转成播客"、"生成播客脚本"、"把这篇文章做成播客"、"播客对话"、"podcast script"、"N个人的播客"，或者上传了一个 markdown 文件并希望以播客形式呈现。即使用户只说"帮我把这篇文章转成播客"，也应使用本 skill。默认输出中文脚本，除非用户明确指定其他语言。
72
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的执行流程描述“从用户提供的 Markdown 文件（或消息中的内容）提取文章核心议题/论点/数据/结构”等，意味着运行时会把用户外部输入（通常包含他人/网络文章等“outsider-authored free text”）读入并进入 LLM 上下文来生成脚本，因此存在间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.