Stremio Unwatched

This skill appears to do what it says, but review these practical points before installing: - Credential storage: It asks for your Stremio email/password (or STREMIO_EMAIL/STREMIO_PASSWORD env vars) to obtain an authKey, which it caches at ~/.openclaw/credentials/stremio.json (or OPENCLAW_CREDENTIALS_DIR). The authKey file is created with restrictive permissions, but you should verify and trust this behavior before use. If you prefer not to store credentials, use interactive login and/or revoke tokens via Stremio later. - External network calls: The skill will contact api.strem.io, v3-cinemeta.strem.io, and any addon transport URLs returned by your installed Stremio addons. Those addon endpoints are third-party hosts and will receive requests for stream resolution (including the video IDs). This is required for resolving streams, but be mindful that using untrusted addons can expose which videos you query. - Google Calendar sync: The calendar sync uses gog (gogcli) and will create/populate a dedicated "Stremio TV" calendar if you opt in. Ensure you have gog installed and authenticated, and understand that event descriptions include the Stremio video ID. - Local services and torrent clients: Downloading can use your local Stremio streaming server or local torrent clients (transmission, aria2, deluge, qbittorrent). The scripts will interact with those binaries and with http://127.0.0.1:11470 if the Stremio server is running. - Source verification: SKILL.md suggests cloning a GitHub repo (https://github.com/pat-industries/stremio-unwatched.git). The registry metadata shows source/homepage unknown — if you plan to install from that repo, review the repository contents and confirm it matches the packaged files. - Recommended precautions: inspect the included scripts (they are plain shell/Node and easy to read), run first in a restricted environment (or container) if you are uncertain, and limit use of third-party addons you don't trust. If you want stricter control, avoid providing STREMIO_PASSWORD as an env var and prefer interactive login so you know when credentials are used.