← 返回 Skills 市场
Terabox Link Extractor
作者
abdul-karim-mia
· GitHub ↗
· v1.4.0
1217
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install terabox-link-extractor
功能描述
Direct link extraction from TeraBox URLs using the XAPIverse protocol. Extracts high-speed download and stream links (360p/480p) without browser session requ...
安全使用建议
This skill appears to do what it says: it sends a TeraBox link and your TERABOX_API_KEY to XAPIverse (https://xapiverse.com) to obtain direct download/stream URLs. Before installing: (1) Verify you trust the XAPIverse service and its privacy/terms, because your API key and the full target URL will be transmitted there. (2) Use a dedicated, limited-scope API key (do not reuse high-privilege secrets). (3) Confirm that extracting and downloading the target content is legal and allowed by the content owner. (4) Note the skill enforces Downloads/ as the output root (path traversal is blocked). (5) The SKILL.md requires the agent to ask for explicit user permission before transmitting URLs — ensure your agent actually follows that consent flow if you need the extra privacy protection. Minor metadata inconsistencies (README examples vs. standardized TERABOX_API_KEY and a homepage field mismatch) look like documentation drift but do not affect execution.
功能分析
Type: OpenClaw Skill
Name: terabox-link-extractor
Version: 1.4.0
The OpenClaw skill 'terabox-link-extractor' is benign. Its primary function is to extract direct download links from TeraBox URLs using the XAPIverse API. The `SKILL.md` explicitly implements an 'Informed Consent Protocol' requiring user permission before transmitting the URL and `TERABOX_API_KEY` to `https://xapiverse.com`, which is the stated third-party service. The `scripts/extract.js` file includes robust path traversal protection for downloads, ensuring files are written only within a designated 'Downloads' directory. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's security protocols.
能力评估
Purpose & Capability
Name/description, node requirement, and TERABOX_API_KEY map directly to the code's behavior: scripts/extract.js posts the provided TeraBox URL to https://xapiverse.com/api/terabox-pro and returns download/stream links. There are no unrelated environment variables or binaries requested.
Instruction Scope
SKILL.md explicitly requires informed user consent before sending a URL and documents that the full target URL and API key are transmitted to xapiverse.com. The handler delegates consent handling to the LLM as described. This is within scope for an extraction skill, but it does mean user-provided URLs and the API key will leave the host environment.
Install Mechanism
No install script or remote downloads are present; the skill requires only a local Node runtime and contains plain JS files. There is no suspicious installer or external archive retrieval.
Credentials
Only one required credential (TERABOX_API_KEY) is declared and actually used. The code supports multiple comma-separated keys, which is reasonable for failover. The key is sent to the documented external API (xapiverse.com) — this is necessary for the service but is a privacy/secret-exposure consideration, not an incoherence.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not attempt to modify other skills or system-wide agent settings. Downloads are sandboxed to a local Downloads/ directory per the code's checks.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install terabox-link-extractor - 安装完成后，直接呼叫该 Skill 的名称或使用
/terabox-link-extractor触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.4.0
**Security update: Skill now requires user permission before extracting TeraBox links.**
- Introduced an informed consent protocol: the user must confirm before extraction begins.
- Updated AI interaction rules to prioritize privacy and user awareness.
- Added new privacy disclosures regarding data sent to the extraction service.
- New documentation and changelog files for easier reference.
- Added handler.js and package.json for improved maintainability and structure.
v1.3.8
No user-facing changes detected in this release.
- No updates or modifications found in documentation or code files.
- Functionality and usage remain unchanged from the previous version.
v1.3.7
- No file or documentation changes detected in this version.
- No updates or modifications from the previous release.
v1.3.6
- SKILL.md reformatted to add a YAML frontmatter separator (“---”) at the beginning of the file.
- No changes to logic, requirements, setup, or user instructions.
- Documentation structure improved for consistency.
v1.3.5
terabox-link-extractor 1.3.5
- Expanded extraction to support fast stream links in all available resolutions.
- Updated output format to include per-file type, quality, and dynamic resolution listing.
- Enforced strict, text-only reporting (no interactive buttons or filler text).
- Added skill metadata for environment requirements and authentication details.
- Improved protocol for automatic skill triggering and response formatting.
v0.2.0
terabox-link-extractor 0.2.0
- Added CHANGELOG.md to the project.
- Improved output directory handling: `--out` flag now requires subdirectories within `workspace/Downloads`.
- Updated SKILL.md to clarify the usage of the `--out` flag and its directory restrictions.
v0.1.0
Initial release with TeraBox direct link extraction:
- Extracts high-speed download and streaming links (360p/480p) from any valid TeraBox URL using the XAPIverse API.
- Works without needing a browser session.
- Supports download and streaming output, including credits remaining.
- Command-line flags for download, output directory, and (future) stream quality selection.
- Clear troubleshooting guidance provided for common issues (invalid link, credits exhausted).
元数据
常见问题
Terabox Link Extractor 是什么？
Direct link extraction from TeraBox URLs using the XAPIverse protocol. Extracts high-speed download and stream links (360p/480p) without browser session requ... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1217 次。
如何安装 Terabox Link Extractor？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install terabox-link-extractor」即可一键安装，无需额外配置。
Terabox Link Extractor 是免费的吗？
是的，Terabox Link Extractor 完全免费（开源免费），可自由下载、安装和使用。
Terabox Link Extractor 支持哪些平台？
Terabox Link Extractor 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Terabox Link Extractor？
由 abdul-karim-mia（@abdul-karim-mia）开发并维护，当前版本 v1.4.0。
推荐 Skills