← 返回 Skills 市场

download-manager

Name: download-manager
Author: jinkang19940922

作者噢福阔斯KANG · GitHub ↗ · v1.2.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install download-manager-jinkang

功能描述

管理和查看 qBittorrent 和 Transmission 下载器的任务状态，支持添加、启动、暂停和删除下载任务。

使用说明 (SKILL.md)

Download Manager Skill

完全管理 qBittorrent 和 Transmission 下载器。

激活条件

用户提到以下关键词时激活：

下载器管理
下载状态
qBittorrent
Transmission
种子管理
做种
任务管理

支持平台

qBittorrent

地址：http://192.168.10.222:8085
用户名：admin
密码：70719405

Transmission

地址：http://192.168.10.222:9091
用户名：admin
密码：70719405

功能

1. 查看状态

下载状态           # 查看所有下载器
qb                # 只看 qBittorrent (需浏览器登录)
tr                # 只看 Transmission

2. 列出任务

tr --list           # Transmission 全部任务
tr --list seeding  # Transmission 做种任务
tr --list downloading  # Transmission 下载中

3. 添加任务 (Transmission)

tr --add "magnet:xxx"    # 通过 magnet 添加
tr --add "http://xxx"    # 通过 URL 添加

4. 暂停任务 (Transmission)

tr --pause \x3Chash>  # 暂停 Transmission 任务

5. 恢复任务 (Transmission)

tr --resume \x3Chash> # 恢复 Transmission 任务

6. 删除任务 (Transmission)

tr --delete \x3Chash>          # 删除 Transmission 任务（保留文件）
tr --delete \x3Chash> --delfiles  # 删除任务并删除文件

命令行用法

# 查看状态
python download_manager.py --all
python download_manager.py --qb        # 需要浏览器登录
python download_manager.py --tr

# 列出任务
python download_manager.py --tr --list
python download_manager.py --tr --list seeding

# 添加任务
python download_manager.py --tr --add "magnet:xxx"
python download_manager.py --tr --add "http://xxx"

# 暂停/恢复
python download_manager.py --tr --pause \x3Chash>
python download_manager.py --tr --resume \x3Chash>

# 删除
python download_manager.py --tr --delete \x3Chash>
python download_manager.py --tr --delete \x3Chash> --delfiles

qBittorrent 说明

qBittorrent 需要通过浏览器登录后操作：

打开 http://192.168.10.222:8085
登录用户名：admin / 密码：70719405
通过浏览器界面管理

Transmission 说明

Transmission 支持完整的命令行操作：

添加任务
暂停/恢复
删除
查看状态

获取任务信息

需要先通过 --list 查看任务列表，部分操作需要任务 hash。

注意事项

qBittorrent 建议通过 Web UI 浏览器管理
Transmission 支持完整 API 操作
删除文件操作不可恢复

安全使用建议

This skill does what it says (manages qBittorrent/Transmission) but includes hard-coded administrative URLs and credentials in SKILL.md and download_manager.py. Before installing or running it: 1) Do NOT rely on the embedded credentials — treat them as developer placeholders. 2) Inspect the code yourself (or have someone you trust do it). 3) Replace embedded URLs/credentials with configuration (environment variables or an explicit config file) and ensure secrets are not stored in plain text in the skill. 4) If you don't control 192.168.10.222 on your network, avoid running it as-is — it will attempt to connect to that host using admin credentials. 5) Run the tool in an isolated environment (VM/container) if you want to test. 6) Prefer skills that declare required credentials in metadata so you can protect them and review access before granting it.

功能分析

Type: OpenClaw Skill Name: download-manager-jinkang Version: 1.2.0 The skill contains hardcoded plaintext credentials (username 'admin', password '70719405') and a static local IP address (192.168.10.222) in both SKILL.md and download_manager.py. Additionally, the qb_add function in download_manager.py allows reading arbitrary local files if a file path is provided, which could be leveraged by the agent to access sensitive local data. These are significant security vulnerabilities and insecure practices, though they appear to be functional flaws rather than intentional malware.

能力评估

ℹ Purpose & Capability

Name/description (manage qBittorrent and Transmission) matches the code and instructions: the script implements listing, add/pause/resume/delete and status for both services. However, the skill embeds a specific LAN IP and admin credentials for both qBittorrent and Transmission instead of exposing them as configurable inputs (environment variables or config), which makes the package tied to the packager's environment and unexpected for a general-purpose skill.

⚠ Instruction Scope

SKILL.md explicitly contains the administrative URL, username, and password for both services and instructs the user/agent to log in or run the script against those endpoints. While this is within the declared domain (managing those services), embedding credentials in runtime instructions grants the skill immediate access to a potentially private host and leaks secrets in the skill text — a scope creep / secrecy issue.

✓ Install Mechanism

No install spec or external downloads; all code is included in the repository. This lowers install risk because nothing is fetched from remote arbitrary URLs.

⚠ Credentials

The skill requests no environment variables in metadata but contains hard-coded credentials (QB_USER, QB_PASS, TR_AUTH) and network addresses inside the code and SKILL.md. Sensitive credentials are present but not declared as required/protected inputs — disproportionate handling of secrets and not transparent to an installer.

✓ Persistence & Privilege

No special persistence or 'always' privilege requested; agent-autonomy defaults are unchanged. The skill does not attempt to modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install download-manager-jinkang
安装完成后，直接呼叫该 Skill 的名称或使用 /download-manager-jinkang 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.2.0

Version 1.2.0 of the Download Manager Skill - No file changes detected in this release. - Functionality and documentation remain unchanged from the previous version.

v1.1.0

Version 1.1.0 introduces enhanced command-line management for Transmission and clearer platform-specific instructions. - Expanded Transmission management with add, pause, resume, and delete operations fully available via command line. - Updated and detailed usage instructions for both qBittorrent (web UI focused) and Transmission (API & CLI). - Added sample commands for all supported task operations. - Activation keywords and functional descriptions clarified and reorganized. - Security and usage notes improved, with special emphasis on data loss risk when deleting files.

v1.0.0

- Initial release of Download Manager Skill. - Supports management of qBittorrent and Transmission downloaders. - Allows viewing status, listing tasks, and performing task operations (start, pause, delete). - Supports adding tasks via magnet links or torrent files. - Provides status summaries, including task counts, speeds, and disk space information.

元数据

Slug download-manager-jinkang

版本 1.2.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 3

常见问题