← 返回 Skills 市场
Trakt
作者
Matt Russell
· GitHub ↗
· v0.1.0
2087
总下载
0
收藏
6
当前安装
1
版本数
在 OpenClaw 中安装
/install trakt
功能描述
Track and view your watched movies and TV shows via trakt.tv. Use when user asks about their watch history, what they've been watching, or wants to search for movies/shows.
安全使用建议
This skill appears to do what it says: it relies on the third‑party 'trakt-cli' npm package and your own trakt OAuth app to read your watch history. Before installing: (1) verify the trakt-cli npm package and its maintainer (inspect package page and source) since the SKILL.md suggests a global npm install; (2) avoid installing global npm packages as root/sudo if possible; (3) be aware authentication tokens will be stored in ~/.trakt.yaml — check its filesystem permissions and contents; (4) note the registry metadata did not list the required binary even though SKILL.md requires it — double-check that your environment has trakt-cli or that you are comfortable installing it. If you do not trust the npm package or the skill source, do not install.
功能分析
Type: OpenClaw Skill
Name: trakt
Version: 0.1.0
The skill is designed to interact with trakt.tv for watch history and search, which aligns with its stated purpose. However, the `SKILL.md` file includes an instruction to install `trakt-cli` globally via `npm install -g trakt-cli`. While this is a standard method for installing CLI tools and is necessary for the skill's functionality, it represents a high-privilege operation that could lead to arbitrary code execution if the `trakt-cli` npm package were compromised, posing a supply chain risk. This constitutes a risky capability without clear malicious intent from the skill author, classifying it as suspicious.
能力评估
Purpose & Capability
The skill is about querying trakt.tv history and search and its runtime instructions rely on the trakt-cli tool and trakt OAuth credentials — that is reasonable and expected. Minor inconsistency: the registry metadata provided with the skill lists no required binaries, but the packaged SKILL.md declares a dependency on the 'trakt-cli' binary.
Instruction Scope
SKILL.md stays on-task: it instructs installing trakt-cli, creating a trakt app, authenticating, and running read-only commands (history, search). It references storing credentials at ~/.trakt.yaml so the CLI can access history; there are no instructions to read unrelated files or exfiltrate data.
Install Mechanism
This is an instruction-only skill with no formal install spec in the registry. The SKILL.md recommends 'npm install -g trakt-cli' — a normal but non-trivial action (global npm install writes system locations and installs third-party code). The absence of a registry install entry (while SKILL.md specifies installation) is an inconsistency to be aware of.
Credentials
No environment variables, secrets, or unrelated credentials are requested by the registry. The only credentialing is user-created trakt OAuth client id/secret (expected for this purpose) and local tokens stored in ~/.trakt.yaml.
Persistence & Privilege
The skill does not request permanent inclusion (always: false) and does not claim to modify other skills or system-wide settings. The CLI will store auth tokens locally (~/.trakt.yaml), which is typical for an OAuth CLI tool.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install trakt - 安装完成后,直接呼叫该 Skill 的名称或使用
/trakt触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release
元数据
常见问题
Trakt 是什么?
Track and view your watched movies and TV shows via trakt.tv. Use when user asks about their watch history, what they've been watching, or wants to search for movies/shows. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2087 次。
如何安装 Trakt?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trakt」即可一键安装,无需额外配置。
Trakt 是免费的吗?
是的,Trakt 完全免费(开源免费),可自由下载、安装和使用。
Trakt 支持哪些平台?
Trakt 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Trakt?
由 Matt Russell(@mjrussell)开发并维护,当前版本 v0.1.0。
推荐 Skills