T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/stremio_download.sh:24- Finding
Download command performs immediate side effects despite documented dry-run and interactive behavior
- Content
View full analysis
&2 else echo " [dry-run] Would download: ${best_url}" >&2 fi ((downloaded++)) || true continue fi if $MAGNETS_ONLY; then if [[ -n "$best_hash" ]]; then echo "magnet:?xt=urn:btih:${best_hash}&dn=$(echo "$label" | sed 's/ /%20/g')" else echo "$best_url" fi ((downloaded++)) || true continue fi # Download if [[ -n "$best_hash" ]]; then if $use_stremio; then download_via_stremio "$best_hash" "${file_idx:-0}" && ((downloaded++)) || ((failed++)) elif [[ -n "$torrent_client" ]]; then magnet="magnet:?xt=urn:btih:${best_hash}&dn=$(echo "$label" | sed 's/ /%20/g')" download_via_client "$torrent_client" "$magnet" && ((downloaded++)) || ((failed++)) fi elif [[ -n "$best_url" ]]; then echo " Direct URL: ${best_url}" >&2 echo " (Direct URL downloads not yet supported, use --magnets)" >&2 ((failed++)) || true fi ``` ### Tech ...[truncated 1842 chars]- Remediation
View remediation