Anime Download Skill
AdvisoryAudited by Static analysis on May 12, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing or running the tool may execute third-party code and modify the user's local package/cache environment.
The skill's setup path can execute a remote installer and install/run an unpinned external package whose code is not included in the reviewed artifacts. This is disclosed and purpose-aligned, but supply-chain trust is delegated to external sources.
curl -LsSf https://astral.sh/uv/install.sh | sh ... pipx install anicatch && anicatch --search "KEYWORD"
Install uv and anicatch only from trusted sources, consider pinning or reviewing the package, and require user approval before first-time setup.
Downloads may create local files and BitTorrent activity may expose network metadata such as the user's IP address to peers or trackers.
The skill exposes user-directed download commands that fetch torrent content and write files locally. This matches the stated purpose, but it is a meaningful external-network and filesystem action.
`--download "URL"` — download torrent directly from a detail page URL ... `uvx anicatch --download "https://miobt.com/show-xxx.html" -o ~/Downloads`
Confirm each download, choose an appropriate output directory, and only download content from sources the user trusts and is allowed to use.