Download ebooks (epub/pdf) from Anna's Archive and upload them to MEGA automatically. Use when the user asks to download a book, find an ebook, search for a...

This skill is internally consistent with its stated purpose, but consider these points before installing: - Legal/policy risk: The skill targets Anna's Archive and libgen mirrors (sites often used for copyrighted material). Using it may violate law or your organization’s policy. Confirm you have the right to download and store the materials. - Hosts override: SKILL.md notes an /etc/hosts override mapping annas-archive.li to a specific IP to bypass DNS blocks. That indicates explicit circumvention of network filtering; be cautious and consider network/security policy implications. - Credentials: The script expects a configured MEGA remote (rclone) or megacmd installed. Ensure your rclone config is secure — the skill will not itself prompt for or read other credentials, but it will cause uploads using whatever MEGA credentials are already configured on the machine. - Data hygiene: Downloads are cached in /tmp/books. Remove temporary files if you do not want retained copies. - Trust the code: Review the bundled script before running and, if possible, run it in an isolated environment (container or VM) since it performs network requests and writes files. If you require higher assurance, ask the author for provenance of the GitHub repo or a signed release. If these considerations are acceptable and you understand the legal context, the skill behaves as advertised. If you are uncomfortable with bypassing DNS blocks or with the legal risks, do not install or run it.

Type: OpenClaw Skill Name: book-fetch Version: 1.0.0 The skill is classified as suspicious due to potential prompt injection risks against the AI agent in `SKILL.md`. Specifically, the instruction regarding `/etc/hosts` ('The `/etc/hosts` override is already in place: `186.2.165.77 annas-archive.li`') could be interpreted by an agent as a directive to ensure this system configuration, potentially leading to unauthorized privileged system modification. Additionally, the instruction to execute `rclone ls mega:/` is an explicit command for the agent to run. While the Python script `scripts/book_fetch.py` itself appears robust, using `subprocess.run` with lists and sanitizing user inputs, the instructions in the markdown pose a vulnerability for an agent that might over-interpret or attempt to 'fix' environmental prerequisites.