Surge Download Manager

Blazing fast TUI download manager with multi-connection, queue management, server mode, multiple mirrors, and a beautiful terminal interface.

This skill appears to be a thin wrapper around a local 'surge' download manager and is generally coherent with that purpose, but there are small metadata inconsistencies (missing required-bins in registry metadata vs SKILL.md) and no install is provided, so the wrapper will call whatever 'surge' binary is on PATH. Before installing or running this skill: (1) Verify the upstream project/release you plan to install (prefer official GitHub releases or your OS package manager), (2) avoid running an untrusted 'surge' binary — inspect or build it from source if possible, (3) be aware the wrapper launches the surge binary with user-provided URLs/args (no extra sanitization), so run it with least privilege and avoid running as root, (4) confirm the SKILL.md homepage and registry info match the repository you download from. If you want higher assurance, request an install spec that pins a vetted package or includes a checksum for the binary.

Type: OpenClaw Skill Name: surge Version: 1.1.0 The OpenClaw skill 'surge' is a wrapper for the legitimate 'surge' download manager. The SKILL.md provides clear instructions for installation and usage, without any prompt injection attempts to subvert the agent's behavior. The `scripts/surge.py` uses `subprocess.run` and `subprocess.Popen` with lists of arguments, which is the secure method to execute external commands, preventing shell injection vulnerabilities. The script's functionality is entirely aligned with managing downloads and shows no evidence of malicious intent such as data exfiltration, unauthorized execution, or persistence mechanisms.