Media Sync

Download media into /mnt/jellyfin_media subfolders. Track progress.

This skill appears to do what it says: it checks/creates folders under /mnt/jellyfin_media, runs yt-dlp on the URLs you provide, and stores progress in /tmp. Before installing: (1) ensure you mount the intended media directory at /mnt/jellyfin_media so the skill cannot write somewhere unexpected; (2) install yt-dlp from an official source and verify its integrity; (3) only provide URLs you trust (downloading arbitrary URLs can pull malicious content); (4) install the skill from a trusted repository (README clone URL is a placeholder); and (5) if you want extra safety, run the skill in a container or sandbox with the media mount you expect and limited host access.

Type: OpenClaw Skill Name: media-sync Version: 1.1.0 The media-sync skill is a legitimate utility for managing media downloads via yt-dlp. It implements several security-conscious practices, including path sanitization in downloader.sh and check_or_suggest_folder.sh to prevent directory traversal (e.g., stripping '..'), and a mandatory human-in-the-loop confirmation workflow in SKILL.md that prevents the agent from downloading files without explicit user approval. While the SKILL.md file contains instructions to alter the agent's persona (caveman-style), these are stylistic and do not attempt to bypass security controls or exfiltrate data.