← 返回 Skills 市场
369
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install aria2-download
功能描述
通过 Aria2 RPC 添加下载任务，支持实时进度监控。
使用说明 (SKILL.md)
Aria2 Download
通过 Aria2 RPC 添加下载任务，支持实时进度监控。
功能
- ✅ 添加下载任务
- ✅ 实时进度监控
- ✅ 下载完成后输出详细信息
- ✅ 支持 HTTP/FTP/M3U8 等协议
- ✅ 多线程高速下载
配置
环境变量
| 变量 | 默认值 | 说明 |
|---|---|---|
ARIA2_RPC_URL |
http://localhost:6800/jsonrpc | RPC 地址 |
ARIA2_SECRET |
- | RPC 密钥 |
ARIA2_DIR |
- | 下载目录 |
配置示例
export ARIA2_RPC_URL="http://10.0.0.1:6800/jsonrpc"
export ARIA2_SECRET="88888888"
export ARIA2_DIR="/mnt/sda1/download"
使用方法
添加下载
aria2-download add "https://example.com/video.mp4"
查询状态
aria2-download status \x3Cgid>
单次进度
aria2-download progress \x3Cgid>
实时监控
aria2-download watch \x3Cgid> [间隔秒数]
等待完成
aria2-download wait \x3Cgid>
列出活跃任务
aria2-download list
输出示例
下载完成
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ 下载完成！
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📁 文件: video.mp4
📂 路径: /mnt/sda1/download
💾 大小: 100.50 MB (1文件)
📊 状态: 已完成
📈 进度: 100%
📥 下载量: 100.50 MB
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
实时监控
████████████████████ 100.0% | 10.0MB/s | video.mp4
Aria2 安装
Docker (推荐)
docker run -d --name aria2 \
-p 6800:6800 \
-v /path/to/downloads:/downloads \
-e ARIA2_SECRET=88888888 \
p3terx/aria2-pro
Linux
# Ubuntu/Debian
apt install aria2
# 启动 RPC
aria2c --enable-rpc --rpc-listen-all=true --rpc-secret=88888888 --dir=/path/to/downloads
macOS
brew install aria2
配合 x-media-parser 使用
# 一键解析+下载
x-aria-download "https://x.com/user/status/123"
或手动：
# 1. 解析帖子
URL=$(x-media-parser "https://x.com/user/status/123" | jq -r '.media.directUrl')
# 2. 添加下载
aria2-download add "$URL"
安全使用建议
This skill appears to do what it says: control an aria2 RPC and show progress. Before installing or running it: 1) Ensure you trust the configured ARIA2_RPC_URL — any secret (ARIA2_SECRET) you provide will be sent to that RPC endpoint; only point to aria2 instances you control/ trust. 2) The script uses curl and node at runtime but the registry declares no required binaries; make sure curl and node are available (or adapt the script to use jq/other tools). 3) There is a small bug in add_download when no ARIA2_SECRET is set: the payload uses the literal string "URL" instead of the variable ($URL) — you may want to fix that before use. 4) Review/modify ARIA2_DIR and network exposure of aria2 RPC (bind to localhost or use firewall/auth) to avoid remote misuse. 5) As with any script that talks to network services, review the code and run it in an isolated environment if you have security concerns.
功能分析
Type: OpenClaw Skill
Name: aria2-download
Version: 1.0.0
The skill contains a critical command injection vulnerability in `download.sh` where raw output from the Aria2 RPC server is passed directly into a `node -e` execution string using single quotes. A malicious or compromised RPC server could return a crafted response (e.g., containing single quotes and shell commands) to escape the JavaScript string and execute arbitrary code on the host. While this is a high-risk RCE vulnerability, it appears to be an unintentional implementation flaw rather than intentional malware, as the script's logic remains consistent with its stated purpose of managing downloads.
能力评估
Purpose & Capability
Name/description, SKILL.md, and download.sh all focus on aria2 RPC operations and progress monitoring. Environment variables declared in SKILL.md (ARIA2_RPC_URL, ARIA2_SECRET, ARIA2_DIR) are appropriate for this purpose. Minor mismatch: registry metadata listed no required env vars while SKILL.md documents them.
Instruction Scope
Instructions and the script limit actions to interacting with the configured Aria2 RPC (adding tasks, querying status, monitoring). The agent is not instructed to read arbitrary files or send data to third‑party endpoints beyond the user-specified RPC URL.
Install Mechanism
No install spec (instruction-only with an included script). Nothing downloads or executes remote code during install. The runtime does assume typical CLI tools are available (curl, node) but does not declare or install them.
Credentials
Requested secrets (ARIA2_SECRET) and RPC URL are proportional to the skill's functionality. However the registry metadata lists no required env vars while SKILL.md and the script do rely on ARIA2_RPC_URL, ARIA2_SECRET, and ARIA2_DIR — an inconsistency the user should be aware of.
Persistence & Privilege
Skill is not always-enabled and is user-invocable; it does not request persistent system-wide privileges or modify other skill configurations.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install aria2-download - 安装完成后，直接呼叫该 Skill 的名称或使用
/aria2-download触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of aria2-download 1.0.0
- 支持通过 Aria2 RPC 添加下载任务
- 实时监控下载进度
- 下载完成后输出详细信息
- 兼容 HTTP/FTP/M3U8 等协议
- 支持多线程高速下载
- 配置灵活，支持环境变量设置
元数据
常见问题
Aria2 Download 是什么？
通过 Aria2 RPC 添加下载任务，支持实时进度监控。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 369 次。
如何安装 Aria2 Download？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install aria2-download」即可一键安装，无需额外配置。
Aria2 Download 是免费的吗？
是的，Aria2 Download 完全免费（开源免费），可自由下载、安装和使用。
Aria2 Download 支持哪些平台？
Aria2 Download 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Aria2 Download？
由 Ingress（@ingress007）开发并维护，当前版本 v1.0.0。
推荐 Skills