Docker Xunler Downloader

• Analyzed: May 12, 2026, 3:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0eb3e46438536d45b7dea450f7a444b12007ab8aa3477c4d829c951bf2c7ca5a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with a user-configured Docker-deployed Xunlei service for downloading magnet links. It uses `fs` for local configuration storage (`config.json`) and `axios` for all network communication, exclusively targeting the user-specified Xunlei host and port. The `SKILL.md` and other documentation files describe the skill's functionality and do not contain any prompt injection attempts or instructions for the agent to perform actions outside its stated purpose. The authentication mechanism, while specific and involving parsing HTML for a token, appears to be a legitimate adaptation to the Xunlei service's API, as indicated by the reference to the `xunlei-docker-ext` project.