← Back to Skills Marketplace
369
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install aria2-download
Description
通过 Aria2 RPC 添加下载任务，支持实时进度监控。
README (SKILL.md)
Aria2 Download
通过 Aria2 RPC 添加下载任务，支持实时进度监控。
功能
- ✅ 添加下载任务
- ✅ 实时进度监控
- ✅ 下载完成后输出详细信息
- ✅ 支持 HTTP/FTP/M3U8 等协议
- ✅ 多线程高速下载
配置
环境变量
| 变量 | 默认值 | 说明 |
|---|---|---|
ARIA2_RPC_URL |
http://localhost:6800/jsonrpc | RPC 地址 |
ARIA2_SECRET |
- | RPC 密钥 |
ARIA2_DIR |
- | 下载目录 |
配置示例
export ARIA2_RPC_URL="http://10.0.0.1:6800/jsonrpc"
export ARIA2_SECRET="88888888"
export ARIA2_DIR="/mnt/sda1/download"
使用方法
添加下载
aria2-download add "https://example.com/video.mp4"
查询状态
aria2-download status \x3Cgid>
单次进度
aria2-download progress \x3Cgid>
实时监控
aria2-download watch \x3Cgid> [间隔秒数]
等待完成
aria2-download wait \x3Cgid>
列出活跃任务
aria2-download list
输出示例
下载完成
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ 下载完成！
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📁 文件: video.mp4
📂 路径: /mnt/sda1/download
💾 大小: 100.50 MB (1文件)
📊 状态: 已完成
📈 进度: 100%
📥 下载量: 100.50 MB
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
实时监控
████████████████████ 100.0% | 10.0MB/s | video.mp4
Aria2 安装
Docker (推荐)
docker run -d --name aria2 \
-p 6800:6800 \
-v /path/to/downloads:/downloads \
-e ARIA2_SECRET=88888888 \
p3terx/aria2-pro
Linux
# Ubuntu/Debian
apt install aria2
# 启动 RPC
aria2c --enable-rpc --rpc-listen-all=true --rpc-secret=88888888 --dir=/path/to/downloads
macOS
brew install aria2
配合 x-media-parser 使用
# 一键解析+下载
x-aria-download "https://x.com/user/status/123"
或手动：
# 1. 解析帖子
URL=$(x-media-parser "https://x.com/user/status/123" | jq -r '.media.directUrl')
# 2. 添加下载
aria2-download add "$URL"
Usage Guidance
This skill appears to do what it says: control an aria2 RPC and show progress. Before installing or running it: 1) Ensure you trust the configured ARIA2_RPC_URL — any secret (ARIA2_SECRET) you provide will be sent to that RPC endpoint; only point to aria2 instances you control/ trust. 2) The script uses curl and node at runtime but the registry declares no required binaries; make sure curl and node are available (or adapt the script to use jq/other tools). 3) There is a small bug in add_download when no ARIA2_SECRET is set: the payload uses the literal string "URL" instead of the variable ($URL) — you may want to fix that before use. 4) Review/modify ARIA2_DIR and network exposure of aria2 RPC (bind to localhost or use firewall/auth) to avoid remote misuse. 5) As with any script that talks to network services, review the code and run it in an isolated environment if you have security concerns.
Capability Analysis
Type: OpenClaw Skill
Name: aria2-download
Version: 1.0.0
The skill contains a critical command injection vulnerability in `download.sh` where raw output from the Aria2 RPC server is passed directly into a `node -e` execution string using single quotes. A malicious or compromised RPC server could return a crafted response (e.g., containing single quotes and shell commands) to escape the JavaScript string and execute arbitrary code on the host. While this is a high-risk RCE vulnerability, it appears to be an unintentional implementation flaw rather than intentional malware, as the script's logic remains consistent with its stated purpose of managing downloads.
Capability Assessment
Purpose & Capability
Name/description, SKILL.md, and download.sh all focus on aria2 RPC operations and progress monitoring. Environment variables declared in SKILL.md (ARIA2_RPC_URL, ARIA2_SECRET, ARIA2_DIR) are appropriate for this purpose. Minor mismatch: registry metadata listed no required env vars while SKILL.md documents them.
Instruction Scope
Instructions and the script limit actions to interacting with the configured Aria2 RPC (adding tasks, querying status, monitoring). The agent is not instructed to read arbitrary files or send data to third‑party endpoints beyond the user-specified RPC URL.
Install Mechanism
No install spec (instruction-only with an included script). Nothing downloads or executes remote code during install. The runtime does assume typical CLI tools are available (curl, node) but does not declare or install them.
Credentials
Requested secrets (ARIA2_SECRET) and RPC URL are proportional to the skill's functionality. However the registry metadata lists no required env vars while SKILL.md and the script do rely on ARIA2_RPC_URL, ARIA2_SECRET, and ARIA2_DIR — an inconsistency the user should be aware of.
Persistence & Privilege
Skill is not always-enabled and is user-invocable; it does not request persistent system-wide privileges or modify other skill configurations.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install aria2-download - After installation, invoke the skill by name or use
/aria2-download - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of aria2-download 1.0.0
- 支持通过 Aria2 RPC 添加下载任务
- 实时监控下载进度
- 下载完成后输出详细信息
- 兼容 HTTP/FTP/M3U8 等协议
- 支持多线程高速下载
- 配置灵活，支持环境变量设置
Metadata
Frequently Asked Questions
What is Aria2 Download?
通过 Aria2 RPC 添加下载任务，支持实时进度监控。 It is an AI Agent Skill for Claude Code / OpenClaw, with 369 downloads so far.
How do I install Aria2 Download?
Run "/install aria2-download" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Aria2 Download free?
Yes, Aria2 Download is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Aria2 Download support?
Aria2 Download is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Aria2 Download?
It is built and maintained by Ingress (@ingress007); the current version is v1.0.0.
More Skills