← 返回 Skills 市场

Docker Xunler Downloader

Name: Docker Xunler Downloader
Author: saaak

作者王康 · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

1733

总下载

当前安装

版本数

在 OpenClaw 中安装

/install docker-xunlei-downloader

功能描述

Interact with Docker-deployed Xunlei to submit magnet links, monitor tasks, and prioritize main content downloads with intelligent filtering.

使用说明 (SKILL.md)

Xunlei Docker Downloader Skill

Description

A skill that allows OpenClaw to interact with Docker-deployed Xunlei services for downloading magnet links and managing download tasks.

Features

Detect and submit magnet links to Xunlei Docker service
Monitor download tasks (in-progress and completed)
View task status including progress and speed
Configure Xunlei service connection settings
NEW: Intelligent content filtering to identify and prioritize main content over advertisements

Configuration

The skill requires the following configuration:

xunlei_host: The host address of the Docker Xunlei service
xunlei_port: The port of the Docker Xunlei service
xunlei_ssl: Whether to use SSL (true/false, default: false)

Commands

xunlei status - Show current download tasks
xunlei submit \x3Cmagnet_link> - Submit a magnet link for download (with intelligent content filtering)
xunlei submit \x3Cmagnet_link> --name \x3Ctask_name> - Submit with custom task name
xunlei config set \x3Chost> \x3Cport> - Configure Xunlei service connection
xunlei config show - Show current configuration
xunlei completed - Show completed tasks
xunlei version - Show Xunlei service version

Intelligent Content Filtering

The skill now includes smart analysis of magnet links to:

Identify main content vs. advertisement files based on size and filename
Prioritize large files with content indicators (e.g., "hhd800.com@", "FHD", "1080p")
Filter out small files with ad indicators (e.g., "game", "demo", "trailer", "合集", "大全")
Automatically select the most relevant files for download

Dependencies

Node.js
Chrome browser (for authentication methods)

Implementation Notes

Based on the xunlei-docker-ext project by saaak, this skill provides server-side functionality to interact with Xunlei Docker services without requiring a browser extension.

安全使用建议

Things to check before installing or enabling this skill: - Inspect SKILL.md, config.json, and all JS files locally for any hidden/encoded content (the scanner flagged a base64-block). Do not trust embedded encoded blocks without decoding and reviewing them. - The package includes package.json/package-lock but registry metadata had no install spec; if you run 'npm install' you will fetch packages (package-lock points to registry.npmmirror.com). Prefer to review package-lock integrity (checksums) or install dependencies from a source you trust. - Change the provided config.json default (192.168.1.40:2345) before running; confirm the target host is one you control. The skill will make HTTP(S) requests to whatever host/port you configure — it can be used to probe internal network services if misconfigured. - The skill writes config.json into its skill directory. Back up or sandbox the skill directory and run it in an isolated environment if you want to test safely. - Review the xunlei_docker_client.js auth code (generatePanAuth) — it fabricates tokens and scrapes HTML; ensure this behavior matches your Xunlei instance and that you're comfortable with the approach. - Consider legal/ethical issues: this tool downloads magnet/torrent content; ensure you have rights to download content. If you are not comfortable with these items or cannot fully review the code, do not enable the skill on production systems. If you want higher assurance, request the publisher to provide a signed release, a deterministic install spec, or a minimal instruction-only version that does not require npm installs.

功能分析

Type: OpenClaw Skill Name: docker-xunlei-downloader Version: 1.0.0 The skill is designed to interact with a user-configured Docker-deployed Xunlei service for downloading magnet links. It uses `fs` for local configuration storage (`config.json`) and `axios` for all network communication, exclusively targeting the user-specified Xunlei host and port. The `SKILL.md` and other documentation files describe the skill's functionality and do not contain any prompt injection attempts or instructions for the agent to perform actions outside its stated purpose. The authentication mechanism, while specific and involving parsing HTML for a token, appears to be a legitimate adaptation to the Xunlei service's API, as indicated by the reference to the `xunlei-docker-ext` project.

能力评估

ℹ Purpose & Capability

The files (index.js and xunlei_docker_client.js) implement the described functionality (connect to a user-configured Xunlei service, list/submit tasks, classify files). However registry metadata lacks a description while SKILL.md and README describe Node/Chrome dependencies and require a config; the package contains code and package.json but there is no install spec in the registry metadata — that mismatch is unexpected.

⚠ Instruction Scope

Runtime instructions are scoped to interacting with a configured Xunlei host/port and managing downloads; index.js reads/writes a local config.json and the client only contacts the configured baseUrl. However the SKILL.md was flagged by the scanner for a 'base64-block' injection pattern (possible prompt-injection or hidden encoded content) and a default config.json embedded in the package points to an internal IP (192.168.1.40) which could cause unintended local-network connections if used as-is. Recommend reviewing the full SKILL.md and config.json contents before use.

⚠ Install Mechanism

The skill has no install spec in registry metadata (marked instruction-only) but includes package.json and package-lock.json and README instructs 'npm install' — this inconsistency means installing will pull dependencies (axios, etc.) from an npm registry. package-lock entries resolve to registry.npmmirror.com (a third-party mirror) which is not inherently malicious but is an external source; there is no signed/verified release specified. This raises supply-chain/installation risk compared to an instruction-only skill.

ℹ Credentials

The skill requests no environment variables or external credentials in metadata, and the code uses only a user-provided host/port/ssl config. That's proportional. Minor oddities: SKILL.md lists 'Chrome browser (for authentication methods)' which the code does not clearly require at runtime, and the large hard-coded random string used to generate an auth token is unusual but appears internal to Xunlei auth emulation (not an external secret).

✓ Persistence & Privilege

The skill does not request 'always: true' and does not modify other skills or system-wide settings. It writes/reads a config.json inside its own skill directory (normal for skill-level config). Autonomous invocation is enabled by default (normal for skills) but not combined with any broad credential access here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install docker-xunlei-downloader
安装完成后，直接呼叫该 Skill 的名称或使用 /docker-xunlei-downloader 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of Xunlei Docker Downloader Skill. - Submit and manage magnet link downloads via Docker-deployed Xunlei services. - Monitor and view download task status, including progress and speed. - Configure service host, port, and SSL options. - NEW: Adds intelligent content filtering to prioritize main content over advertisements during submissions.

元数据

Slug docker-xunlei-downloader

版本 1.0.0

许可证 —

累计安装 4

当前安装数 4

历史版本数 1

常见问题