Quark Subtitle Rescue

Bulk add subtitles to Quark movie folders with high success and low wrong-match risk. Best for "all subfolders" jobs, interrupted runs, and retrying failed t...

This skill's purpose (bulk subtitle rescue for Quark) is plausible, but there are important mismatches you should consider before installing or running it: - It expects a Quark auth cookie stored at ~/.config/quark_subtitle.json, but the manifest does not declare this credential or config path. A Quark cookie grants access to your cloud files — only proceed if you trust the source and understand how the cookie is used. - SKILL.md instructs running many scripts under quark_subtitle_tool (batch_subtitle_runner.py, strict_* scripts) but those scripts are not included in the skill bundle. Confirm you have the referenced quark_subtitle_tool code and virtualenv from a trusted origin before executing anything. - The only included script (scripts/report_progress.py) reads JSON reports from quark_work and prints a summary; it has an optional QUARK_WORK_DIR env override. That script itself looks benign, but it depends on outputs from the missing runner scripts. Recommendations: 1. Ask the skill author (or source) for the full quark_subtitle_tool repository and explicit documentation of where the Quark cookie comes from and how it is stored/used. Do not paste your cookie into third-party tools without verifying source. 2. Inspect the missing scripts (batch_subtitle_runner.py, retry scripts) before running: confirm they do not exfiltrate data, and verify network endpoints they contact (should be Quark and subtitle providers only). 3. Run initial tests in a controlled environment (non-production account or sandbox) and back up important data before allowing automated rollback/delete operations. 4. Prefer explicit declaration of required config/credentials in the skill manifest; absence of that declaration is a red flag. If the author can provide the missing scripts and explicitly declare the Quark cookie/config dependency (and the endpoints used), the assessment could move toward benign. Until then, treat this skill with caution.

Type: OpenClaw Skill Name: quark-subtitle-rescue Version: 0.1.1 The skill bundle provides a structured workflow and reporting tool for batch-processing subtitles on the Quark cloud storage platform. It includes a Python script (report_progress.py) for summarizing task status and detailed markdown instructions (SKILL.md) for an AI agent to manage the process. While the workflow involves handling session cookies and executing local scripts, these actions are directly aligned with the stated purpose of cloud storage automation and lack any indicators of malicious intent, prompt injection, or data exfiltration.