← Back to Skills Marketplace
718
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install byr-cli
Description
Use BYR CLI for auth, search, detail inspection, and safe torrent download planning with JSON envelopes.
README (SKILL.md)
BYR CLI Skill
When To Use
Use this skill when a task needs any BYR operation via CLI:
- authenticate/check auth state
- search torrents with filters
- browse latest torrents with filters
- inspect torrent details
- plan or execute torrent downloads
- fetch BYR metadata and user info
- run local diagnostics before live calls
Boundaries
- Work only through the
byrbinary. - Prefer
--jsonfor machine-readable output. - Do not infer missing IDs/paths or silently mutate files.
- Keep read-only commands non-destructive.
Auth Notes
- Support both cookie formats in
auth import-cookie:uid=...; pass=...session_id=...; auth_token=...(optionalrefresh_token=...)
- Browser import:
chrome(macOS path/decrypt flow)safaribest effort with manual fallback
- Always check status before live operations:
byr auth status --verify --json
Commands (JSON First)
Read-only:
byr check --jsonbyr whoami --jsonbyr doctor [--verify] --jsonbyr browse [--limit \x3Cn>] [--category \x3Calias|id>] [--incldead \x3Calias|id>] [--spstate \x3Calias|id>] [--bookmarked \x3Calias|id>] [--page \x3Cn>] --jsonbyr search --query "\x3Ctext>" --limit \x3Cn> --jsonbyr search --imdb \x3Ctt-id> [--category \x3Calias|id>] [--spstate \x3Calias|id>] --jsonbyr get --id \x3Ctorrent-id> --jsonbyr user info --jsonbyr meta categories --jsonbyr meta levels --jsonbyr auth status [--verify] --jsonbyr auth import-cookie --cookie "\x3Ccookie-header>" --jsonbyr auth import-cookie --from-browser \x3Cchrome|safari> [--profile \x3Cname>] --jsonbyr auth logout --json
Write side effect:
- Dry run first:
byr download --id \x3Ctorrent-id> --output \x3Cpath> --dry-run --json - Actual write:
byr download --id \x3Ctorrent-id> --output \x3Cpath> --json
Search/Browse Semantics
searchandbrowsereturn paged list data.- JSON fields:
matchedTotal: estimated total hits inferred from BYR pagination range blocks.returned: number of items returned in current payload.total: backward-compatible alias ofreturned.
- If
--pageis omitted, list commands auto-fetch subsequent pages until--limitis reached. - If
--pageis provided, only that page is fetched.
Side-Effect Policy
Before non-dry-run download:
- verify
--idand--outputare explicit - run dry-run and inspect
sourceUrl/fileName - confirm intent for the output path
If parameters are missing, ask for explicit values.
Error handling
- Surface
error.codeanderror.message. - For
E_ARG_*: request corrected flags/arguments. - For
E_AUTH_*: re-auth guidance (auth import-cookieor credential refresh). - For
E_NOT_FOUND_*: request different query/torrent ID. - For
E_UPSTREAM_*: suggest retry and capture command/context.
Response Style
- Keep result summaries short.
- Include key fields for search/get:
id,title,size,seeders,leechers. - For list commands include both
matchedTotalandreturnedwhen present. - Include key fields for download:
outputPath,sourceUrl,dryRun,bytesWritten.
Usage Guidance
This skill appears to be a thin wrapper around a third‑party 'byr' CLI. Before installing or using it: (1) verify the Homebrew tap and npm package authors and inspect their source repository if possible; (2) prefer the dry-run download flow and require explicit output paths before writing files; (3) be cautious with the 'auth import-cookie --from-browser' flow — importing browser cookies grants access to session tokens and should only be done if you trust the CLI source; consider using a manual cookie string instead or re-authenticating through safer means; (4) run 'byr doctor' and inspect output locally before allowing any write/download actions; and (5) consider the legal/organizational policy implications of torrent usage. If you need higher assurance, request the upstream source code or a reproducible build of the 'byr' binary before installing.
Capability Analysis
Type: OpenClaw Skill
Name: byr-cli
Version: 0.1.2
The skill is classified as suspicious primarily due to the `byr auth import-cookie --from-browser` command described in `SKILL.md`. This command allows the `byr` CLI to access sensitive browser authentication cookies (from Chrome/Safari), which is a high-risk capability. While the skill's instructions frame this as a legitimate method for authenticating the `byr` CLI and include safeguards for other operations (e.g., dry-run for downloads), exposing a command that can read browser credentials, even for its stated purpose, presents a significant security vulnerability if the `byr` binary itself is compromised or if the agent is later prompted to misuse this capability for exfiltration. There is no clear evidence of intentional malicious behavior (e.g., instructions for data exfiltration or persistence) from the skill's instructions themselves, but the inherent risk of this capability makes it suspicious.
Capability Assessment
Purpose & Capability
Name/description match the behavior: the skill delegates all work to a 'byr' CLI and declares Homebrew/npm install options that create the 'byr' binary. Requiring a local 'byr' binary is coherent for a CLI wrapper.
Instruction Scope
SKILL.md explicitly documents browser cookie import flows (chrome macOS path/decrypt flow, safari best-effort) which implies reading/decrypting local browser profiles or cookies. The skill text does not declare or constrain access to those local files; because this is instruction-only, the actual access would be performed by the installed 'byr' binary but the instructions encourage actions that touch sensitive local secrets (browser session tokens).
Install Mechanism
Installers are a Homebrew formula from a third-party tap (1MoreBuild/tap) and an npm package (byr-pt-cli). These are reasonable fallback mechanisms but both are third‑party sources (not a widely-recognized official repo linked in the skill). This raises moderate supply-chain risk — verify the tap/package source before installing.
Credentials
The skill requests no environment variables or credentials, which is proportionate. However, the documented browser cookie import is effectively a request to access local sensitive secrets (cookies/session tokens) that is not represented in 'requires' or config path metadata.
Persistence & Privilege
always is false and the skill is instruction-only; it does not request permanent agent presence or modifications to other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install byr-cli - After installation, invoke the skill by name or use
/byr-cli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Prefer Homebrew install metadata with npm fallback for BYR CLI skill
v0.1.1
Expanded command coverage and list metadata guidance (matchedTotal/returned, browse/check/whoami/doctor)
Metadata
Frequently Asked Questions
What is BYR CLI Skill?
Use BYR CLI for auth, search, detail inspection, and safe torrent download planning with JSON envelopes. It is an AI Agent Skill for Claude Code / OpenClaw, with 718 downloads so far.
How do I install BYR CLI Skill?
Run "/install byr-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is BYR CLI Skill free?
Yes, BYR CLI Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does BYR CLI Skill support?
BYR CLI Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created BYR CLI Skill?
It is built and maintained by Haitian (@1morebuild); the current version is v0.1.2.
More Skills