Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Movie Subtitle Viewer

v0.1.0

Search, download, parse, and summarize movie subtitles from OpenSubtitles in .srt or .ass formats using movie name and year.

0· 348·1 current·1 all-time
byAnonymous@adminlove520

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for adminlove520/movie-subtitle-viewer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Movie Subtitle Viewer" (adminlove520/movie-subtitle-viewer) from ClawHub.
Skill page: https://clawhub.ai/adminlove520/movie-subtitle-viewer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install movie-subtitle-viewer

ClawHub CLI

Package manager switcher

npx clawhub@latest install movie-subtitle-viewer
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The code and SKILL.md behavior (searching OpenSubtitles, downloading .srt/.ass, parsing via pysubs2) align with the declared purpose. However the registry metadata claims no required env vars/credentials while both SKILL.md and subtitle_client.py clearly require OPENSUBTITLES_API_KEY, OPENSUBTITLES_USERNAME, and OPENSUBTITLES_PASSWORD — that registry omission is an inconsistency that should be corrected.
!
Instruction Scope
Runtime instructions and code explicitly read OpenSubtitles credentials from environment variables and save downloaded subtitle files into the workspace. The SKILL.md also references higher-level features (generating summaries) and files (movie_summary.py, scripts/movie_viewer.py) that are not present in the package — the missing components and the discrepancy between declared and actually-used env vars are scope/integrity concerns. The instructions do not ask for unrelated system files, but they do rely on environment variables that the registry didn't list.
Install Mechanism
There is no install spec (instruction-only from platform perspective) but a requirements.txt is included and README suggests pip installing pysubs2, requests, and python-dotenv. This is low-to-moderate risk; no arbitrary remote downloads or extract steps are present. One minor inconsistency: python-dotenv is listed but the code does not call dotenv.load_dotenv (it expects env vars to be set), and README/SKILL.md reference files (.env.example) that are not in the bundle.
!
Credentials
The environment variables required by the code (OPENSUBTITLES_API_KEY, OPENSUBTITLES_USERNAME, OPENSUBTITLES_PASSWORD) are appropriate for accessing OpenSubtitles, but the registry metadata does not declare them (primaryEnv is none). That mismatch could cause users to miss that credentials are needed. The skill will store downloaded subtitle files in the workspace — consider whether you want API credentials and downloaded files in that environment.
Persistence & Privilege
The skill does not request always:true and it does not attempt to modify other skills or system-wide configuration. It writes subtitle files to the workspace (normal for this function) but does not request elevated or persistent platform privileges.
What to consider before installing
This skill appears to implement an OpenSubtitles client and subtitle parser, which is coherent with its description — but there are several mismatches and missing files you should watch for before installing: - Credentials: The code expects OPENSUBTITLES_API_KEY, OPENSUBTITLES_USERNAME, and OPENSUBTITLES_PASSWORD in the environment, but the registry metadata lists no required env vars. Do not supply credentials until you confirm where and how they will be stored. Prefer creating a dedicated API key/account with least privilege. - Workspace writes: Downloaded subtitle files are saved into the workspace. If that workspace is backed up or synced, sensitive data could be persisted. Consider the storage location and clean-up policy. - Missing/unused files: SKILL.md and README reference a movie_summary.py and scripts/movie_viewer.py that are not present; the summary-generation step is not included in the bundle. Ask the author for the missing files or updated documentation. - Dependency handling: The package lists python-dotenv but code doesn't load it; verify how you will provide env vars (system env vs .env file). Avoid committing .env files with real credentials. If you want to proceed: (1) ask the maintainer to fix the registry metadata to declare required env vars and to provide the missing summary code, (2) run the code in a sandbox or isolated environment, and (3) avoid reusing high-value credentials — create a separate OpenSubtitles account/API key for testing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ft046n6ts62m14whtdhrw0982mdn9
348downloads
0stars
1versions
Updated 12h ago
v0.1.0
MIT-0

Movie Subtitle Viewer Skill

让 AI 通过字幕「看」电影的 OpenClaw 技能。

触发词

  • "看电影"
  • "搜字幕"
  • "下载字幕"
  • "subtitle"

功能

  1. 搜索字幕 - 通过电影名/年份搜索 OpenSubtitles
  2. 下载字幕 - 下载 .srt 格式字幕文件
  3. 解析字幕 - 提取电影台词
  4. 生成摘要 - 让 AI 理解剧情

使用方法

搜索电影字幕

小溪,帮我搜索《XXX》的字幕

搜索并下载

小溪,帮我下载《人工智能》的英文字幕

解析字幕

小溪,帮我解析这个字幕文件

环境变量

需要在 .env 或系统环境中设置:

OPENSUBTITLES_API_KEY=your_api_key
OPENSUBTITLES_USERNAME=your_username  
OPENSUBTITLES_PASSWORD=your_password

获取 OpenSubtitles API

  1. 注册 https://www.opensubtitles.com
  2. 进入 Profile → API
  3. 生成 API Key

注意事项

  • ⚠️ 不要泄露你的 API Key 和密码
  • 📝 字幕文件会保存在 workspace 目录
  • 🎬 支持 .srt 和 .ass 格式

示例

看《机械姬》

用户: 小溪,帮我下载《机械姬》的字幕

小溪: 好的!让我搜索一下...
[搜索字幕]
[下载字幕]
[解析台词]

《机械姬》剧情摘要:
- 程序员 Caleb 被邀请到老板的豪宅,对 AI 进行图灵测试
- AI 名为 Ava,具有人类外貌和高度智能
- 测试过程中,Ava 开始展现出自我意识和操控欲...

依赖

  • pysubs2 - 字幕解析
  • requests - HTTP 请求

目录

skill/
├── SKILL.md              # 本文件
└── scripts/
    └── movie_viewer.py  # 核心逻辑

🦞 Skill for OpenClaw | Made by 小溪

Comments

Loading comments...