Stremio Casting

Busca conteúdo no Stremio Web e transmite para dispositivos Chromecast usando CATT e Playwright. Use para reproduzir filmes e séries diretamente do Stremio em TVs.

Before installing or running this skill, consider the following: - The script is hard-coded to use a remote stremio.rocks streamingServer (not the local 127.0.0.1 service described). That remote host will see your search/query activity and can serve arbitrary content; only proceed if you trust that host. - If you expect local-only operation, edit the script to point to your local Stremio server URL (127.0.0.1:11470) and update the request-matching logic accordingly. - Install Playwright and catt from official sources, and run the script in an isolated environment (container or VM) if you are unsure about the remote streamingServer. - Ask the skill author to explain why the stremio_url contains a stremio.rocks host and to update SKILL.md to match the actual behavior, or to remove the hard-coded remote streamingServer and provide an install script that pins dependencies. - If you cannot verify the remote host, do not run this skill on sensitive machines or networks; run it in a sandboxed environment where outbound connections are restricted. What would change this assessment: If the author confirms the stremio.rocks URL is an official, trusted relay (with proof) or replaces the hard-coded URL with a configurable local address and updates SKILL.md to match, the skill would be coherent with its stated purpose and could be considered benign.

Type: OpenClaw Skill Name: stremio-cast Version: 1.0.0 The skill is classified as suspicious due to the use of security-reducing browser flags (`--ignore-certificate-errors`, `--no-sandbox`, `--disable-setuid-sandbox`) in `scripts/stremio_cast.py`, which weaken the security posture of the automated browser. Additionally, it utilizes `subprocess.Popen` to execute external commands (`catt`), a powerful primitive that, while used for its stated purpose here, carries inherent risk in an agent environment. There is no clear evidence of intentional malicious behavior such as data exfiltration, persistence, or prompt injection for harmful objectives.