Sumo Torrent

Search BT4G for torrents and add magnet links to qBittorrent. Manual workflow with tracker enrichment. For OpenClaw agents with browser capability.

Before installing, consider these points: - The skill asks the agent to use a specific browser profile ('my-daily-chrome') to bypass Cloudflare. That profile likely contains session cookies and other private data; grant access only if you trust the profile and understand the privacy implications. - The Python bridge uses hard-coded qBittorrent credentials (admin/adminadmin) and assumes qBittorrent is running on localhost:8080. Change default passwords and avoid exposing the WebUI to the network. If you don't want the skill to control your local qBittorrent, don't provide or allow access to that profile/port. - The SKILL.md and scripts assume Windows paths (C:\butler_sumo\...) but the registry metadata has no OS restriction. Ensure the paths make sense for your environment and that the agent isn't given unnecessary filesystem access. - The skill asks other agent instances to forward commands to a centralized 'master' profile; this centralization can concentrate sensitive access. If multiple agents are in use, be cautious about routing actions through a single privileged profile. - Legal and safety reminder: searching/downloading torrents can have legal risks depending on content and jurisdiction. Verify that your use is lawful. If you decide to use this skill: review and sanitize the scripts (remove hard-coded credentials, confirm output path), avoid sharing personal browser profiles with the agent, and restrict the agent's browser/session access to a disposable profile where possible.

Type: OpenClaw Skill Name: sumo-torrent Version: 1.0.4 The skill bundle provides tools to search for torrents and interface with a local qBittorrent instance. It is classified as suspicious due to several high-risk practices: `add_to_qbittorrent.py` contains hardcoded default credentials (admin/adminadmin), and `SKILL.md` explicitly instructs the AI agent to use a specific browser profile ('my-daily-chrome') to bypass Cloudflare, which grants the agent access to the user's personal session cookies and browsing data. While these behaviors are aligned with the stated purpose of the tool, the use of hardcoded paths (C:\butler_sumo) and the instruction to access sensitive browser profiles represent significant security and privacy risks.