MangaDex CLI

MangaDex CLI skill for search, manga/chapter lookup, follow-feed checks, and recommendations.

Security Scan

The skill's declared purpose, install steps, and runtime instructions are consistent: it installs and runs an npm-based MangaDex CLI and does not request unrelated credentials or system access.

Purpose & Capability

Name/description, required binary (node), and install spec (@mtsku/mangadex-cli -> mangadexcli) align with the listed commands (search, manga/chapter info, feed, auth). Nothing requested appears unrelated to a MangaDex CLI.

Instruction Scope

SKILL.md restricts the agent to running mangadexcli commands and basic installation checks. It documents auth flows (client id/secret, username/password, token) but does not instruct the agent to read arbitrary system files or environment variables. It does not say where tokens/credentials are persisted locally—so credential storage behavior is unknown and should be checked before trusting long-lived tokens.

Install Mechanism

Installation is via an npm package (@mtsku/mangadex-cli) installed globally (npm install -g). Using the public npm registry is standard but carries the usual supply-chain risk: the package owner/source should be verified before global installation because npm packages run code on install and at runtime.

Credentials

The skill declares no required environment variables or config paths. The documented auth commands accept credentials as CLI args or tokens, which is proportionate to the feature set. However, the skill does not declare where/if those credentials are stored, so you should verify storage location and permissions.

Persistence & Privilege

always is false and no system-wide config paths or other skills' configs are modified. The only persistent action implied is a global npm install of the CLI binary, which is expected for a CLI skill.

Assessment

This skill appears to do what it claims, but before installing: 1) verify the npm package @mtsku/mangadex-cli (publisher, repository, and recent downloads/reviews) to reduce supply-chain risk; 2) prefer using tokens over passing username/password on the command line (CLI args can leak via process lists and shell history); 3) check where the CLI stores auth tokens or config files on disk and ensure appropriate permissions; 4) if you want to reduce risk, install or run the package in an isolated environment (container or VM) rather than globally on your primary system.

MangaDex CLI Skill

Use this skill for direct MangaDex CLI workflows. This guide is for LLM/agent execution only.

Installation Check

1. Check availability:
   • command -v mangadexcli
2. If missing, install:
   • npm install -g @mtsku/mangadex-cli
3. Verify:
   • mangadexcli --help

Command Map

• Discovery/search:
  • mangadexcli search manga "<query>"
  • mangadexcli search author "<query>"
  • mangadexcli search group "<query>"
  • mangadexcli works author "<author_uuid_or_name>"
  • mangadexcli works group "<group_uuid_or_name>"
• Manga/chapter info:
  • mangadexcli manga details <manga_uuid>
  • mangadexcli manga chapters <manga_uuid> --lang en -n 30
  • mangadexcli manga latest <manga_uuid> --lang en -n 10
  • mangadexcli chapter meta <chapter_uuid>
• Follow feed:
  • mangadexcli feed updates --window 24h --lang en
  • mangadexcli feed updates --window 7d
• Recommendations:
  • mangadexcli recommend suggest --tags "action,mystery" -n 10
  • mangadexcli recommend suggest --from-followed --exclude-library --window 7d -n 10

Auth Setup

• Personal client login:
  • mangadexcli auth set-client <client_id> <client_secret>
  • mangadexcli auth login <username> <password>
• Token-only:
  • mangadexcli auth set-token <access_token>
• Authorization code exchange:
  • mangadexcli auth exchange --code <code> --redirect-uri <uri> [--code-verifier <verifier>]
  • mangadexcli auth refresh
• Verify auth:
  • mangadexcli whoami
  • mangadexcli auth where

Output Mode

• Use --json for machine-readable output.
• Public read endpoints work without auth.
• Feed updates and library-aware recommendation exclusions require auth.