← Back to Skills Marketplace
Terabox Link Extractor
by
abdul-karim-mia
· GitHub ↗
· v1.4.0
1217
Downloads
0
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install terabox-link-extractor
Description
Direct link extraction from TeraBox URLs using the XAPIverse protocol. Extracts high-speed download and stream links (360p/480p) without browser session requ...
Usage Guidance
This skill appears to do what it says: it sends a TeraBox link and your TERABOX_API_KEY to XAPIverse (https://xapiverse.com) to obtain direct download/stream URLs. Before installing: (1) Verify you trust the XAPIverse service and its privacy/terms, because your API key and the full target URL will be transmitted there. (2) Use a dedicated, limited-scope API key (do not reuse high-privilege secrets). (3) Confirm that extracting and downloading the target content is legal and allowed by the content owner. (4) Note the skill enforces Downloads/ as the output root (path traversal is blocked). (5) The SKILL.md requires the agent to ask for explicit user permission before transmitting URLs — ensure your agent actually follows that consent flow if you need the extra privacy protection. Minor metadata inconsistencies (README examples vs. standardized TERABOX_API_KEY and a homepage field mismatch) look like documentation drift but do not affect execution.
Capability Analysis
Type: OpenClaw Skill
Name: terabox-link-extractor
Version: 1.4.0
The OpenClaw skill 'terabox-link-extractor' is benign. Its primary function is to extract direct download links from TeraBox URLs using the XAPIverse API. The `SKILL.md` explicitly implements an 'Informed Consent Protocol' requiring user permission before transmitting the URL and `TERABOX_API_KEY` to `https://xapiverse.com`, which is the stated third-party service. The `scripts/extract.js` file includes robust path traversal protection for downloads, ensuring files are written only within a designated 'Downloads' directory. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's security protocols.
Capability Assessment
Purpose & Capability
Name/description, node requirement, and TERABOX_API_KEY map directly to the code's behavior: scripts/extract.js posts the provided TeraBox URL to https://xapiverse.com/api/terabox-pro and returns download/stream links. There are no unrelated environment variables or binaries requested.
Instruction Scope
SKILL.md explicitly requires informed user consent before sending a URL and documents that the full target URL and API key are transmitted to xapiverse.com. The handler delegates consent handling to the LLM as described. This is within scope for an extraction skill, but it does mean user-provided URLs and the API key will leave the host environment.
Install Mechanism
No install script or remote downloads are present; the skill requires only a local Node runtime and contains plain JS files. There is no suspicious installer or external archive retrieval.
Credentials
Only one required credential (TERABOX_API_KEY) is declared and actually used. The code supports multiple comma-separated keys, which is reasonable for failover. The key is sent to the documented external API (xapiverse.com) — this is necessary for the service but is a privacy/secret-exposure consideration, not an incoherence.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not attempt to modify other skills or system-wide agent settings. Downloads are sandboxed to a local Downloads/ directory per the code's checks.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install terabox-link-extractor - After installation, invoke the skill by name or use
/terabox-link-extractor - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.4.0
**Security update: Skill now requires user permission before extracting TeraBox links.**
- Introduced an informed consent protocol: the user must confirm before extraction begins.
- Updated AI interaction rules to prioritize privacy and user awareness.
- Added new privacy disclosures regarding data sent to the extraction service.
- New documentation and changelog files for easier reference.
- Added handler.js and package.json for improved maintainability and structure.
v1.3.8
No user-facing changes detected in this release.
- No updates or modifications found in documentation or code files.
- Functionality and usage remain unchanged from the previous version.
v1.3.7
- No file or documentation changes detected in this version.
- No updates or modifications from the previous release.
v1.3.6
- SKILL.md reformatted to add a YAML frontmatter separator (“---”) at the beginning of the file.
- No changes to logic, requirements, setup, or user instructions.
- Documentation structure improved for consistency.
v1.3.5
terabox-link-extractor 1.3.5
- Expanded extraction to support fast stream links in all available resolutions.
- Updated output format to include per-file type, quality, and dynamic resolution listing.
- Enforced strict, text-only reporting (no interactive buttons or filler text).
- Added skill metadata for environment requirements and authentication details.
- Improved protocol for automatic skill triggering and response formatting.
v0.2.0
terabox-link-extractor 0.2.0
- Added CHANGELOG.md to the project.
- Improved output directory handling: `--out` flag now requires subdirectories within `workspace/Downloads`.
- Updated SKILL.md to clarify the usage of the `--out` flag and its directory restrictions.
v0.1.0
Initial release with TeraBox direct link extraction:
- Extracts high-speed download and streaming links (360p/480p) from any valid TeraBox URL using the XAPIverse API.
- Works without needing a browser session.
- Supports download and streaming output, including credits remaining.
- Command-line flags for download, output directory, and (future) stream quality selection.
- Clear troubleshooting guidance provided for common issues (invalid link, credits exhausted).
Metadata
Frequently Asked Questions
What is Terabox Link Extractor?
Direct link extraction from TeraBox URLs using the XAPIverse protocol. Extracts high-speed download and stream links (360p/480p) without browser session requ... It is an AI Agent Skill for Claude Code / OpenClaw, with 1217 downloads so far.
How do I install Terabox Link Extractor?
Run "/install terabox-link-extractor" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Terabox Link Extractor free?
Yes, Terabox Link Extractor is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Terabox Link Extractor support?
Terabox Link Extractor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Terabox Link Extractor?
It is built and maintained by abdul-karim-mia (@abdul-karim-mia); the current version is v1.4.0.
More Skills