OpenSubtitles Read-only

Read-only OpenSubtitles skill to search and download subtitles via API, then extract scene context by timestamp to answer user questions regarding a show in...

This skill appears to do what it claims: it calls the OpenSubtitles API, optionally logs in to obtain a token for downloads, saves .srt files to a local cache, and extracts subtitle text around a timestamp. Before installing: (1) Understand that the skill needs your OPENSUBTITLES_API_KEY and a User-Agent string — treat the API key like any sensitive credential and don't share it; (2) if you plan to use downloads, you may need to supply username/password or a token — those are only required for login/download and are optional otherwise; (3) the scripts will create and read files under {baseDir}/storage/subtitles — ensure you are comfortable with subtitle files being stored there; (4) ensure awk is available on systems that will run subtitle-context.sh (the top-level check in one script omitted awk); (5) although this is read-only and enforces a storage-directory check to avoid arbitrary file reads, follow the guardrails (don’t log keys, don’t share tokens). If you want extra assurance, inspect/run the included scripts in a restricted environment (or review their output on a single test query) before granting the API key to an agent.

Type: OpenClaw Skill Name: opensubtitles Version: 1.0.4 This OpenClaw skill bundle is benign. The `SKILL.md` provides clear guardrails for the AI agent, explicitly instructing it to avoid arbitrary file access and prevent logging/exposing sensitive credentials. The `opensubtitles-api.sh` script safely constructs API requests using `jq` for URL and JSON encoding, mitigating shell injection risks. Crucially, `subtitle-context.sh` implements robust path validation, ensuring that subtitle files are only read from the designated `{baseDir}/storage/subtitles/` directory and have a `.srt` extension, preventing arbitrary file reads. There is no evidence of malicious intent, data exfiltration, or unauthorized actions.