Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

影视资源搜索技能

v1.0.0

搜索电视剧、动漫、电影的百度网盘和夸克网盘资源链接。当用户询问任何影视作品的网盘链接、资源、下载地址时使用此技能,包括但不限于"有XX的网盘链接吗"、"XX在哪里下载"、"找XX的资源"等问题。

1· 301·1 current·1 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description align with the runtime instructions: the skill extracts a movie name and queries a remote API for Baidu/Quark links. However, the skill has no authoritative source/homepage and the API host (meng-ge.top) is not documented or verifiable, which is unusual for a production integration.
!
Instruction Scope
SKILL.md instructs the agent to send user-supplied keywords to an external GET endpoint and display returned cloud-storage links (including possible passwords). There is no guidance to validate, sanitize, or verify returned links, no rate/usage limits, and no mention of privacy or legal filtering. Because the API receives raw user queries, it can log/search/exfiltrate user interests; the skill gives the agent broad discretion to present potentially illegal or malicious download links.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk and no third‑party packages are installed. This is the lowest install risk.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. Requested privileges are minimal and proportionate to the described purpose.
Persistence & Privilege
always is false and the skill doesn't request persistent system-wide changes. Autonomous invocation is allowed (platform default) but not by itself a concern here.
What to consider before installing
This skill will send user search queries to an unverified third‑party API (meng-ge.top) and display returned Baidu/Quark links (which may include extraction passwords). Before installing, consider the following: 1) The API host has no homepage/source code listed — ask the publisher for provenance and review the API behavior. 2) The endpoint can log everything users search for (privacy risk); avoid sending sensitive or identifying queries. 3) Returned links may point to copyrighted or unsafe content — there is no built‑in safety or content‑license checking. 4) Never auto-open or auto-download returned links; validate links manually and scan downloaded files. 5) If you need similar functionality, prefer well-known, documented APIs or a vetted proxy that filters/validates returned resources. If you proceed, test with non-sensitive queries and request the skill author provide source code or an official homepage for vetting.

Like a lobster shell, security has layers — review code before you run it.

latestvk971ybjnp1td902s1n4kqc07k182sdyg
301downloads
1stars
1versions
Updated 6h ago
v1.0.0
MIT-0

影视资源搜索技能

当用户询问电视剧、动漫或电影的百度网盘或夸克网盘链接时,使用此技能。

触发条件

用户询问包含以下关键词的内容:

  • 电视剧/电视/剧集 + 网盘/百度/夸克/链接/资源
  • 动漫/动画 + 网盘/百度/夸克/链接/资源
  • 电影 + 网盘/百度/夸克/链接/资源

使用方法

  1. 从用户的问题中提取影视作品的名称(keyword)
  2. 调用 API 接口获取资源信息
  3. 格式化展示结果给用户

API 接口

  • 接口地址:https://meng-ge.top/api/movieData/getMoviesByType
  • 请求方法:GET
  • 请求参数:
    • page: 页码(默认 1)
    • size: 每页数量(默认 50)
    • keyword: 影视作品名称(需要 URL 编码)

响应格式

{
  "code": 0,
  "timestamp": 1773299629789,
  "message": "操作成功",
  "data": [
    {
      "id": 2605,
      "movieName": "逐玉.1080P更 15",
      "baiduLink": "https://pan.baidu.com/s/xxx?pwd=1120",
      "quarkLink": "https://pan.quark.cn/s/xxx",
      "type": "TV",
      "updateTime": "2026-03-12 11:55:10",
      "hash": "EaM7XP",
      "hot": true
    }
  ]
}

展示格式

当获取到结果后,按以下格式展示:

找到 [影视名称] 的资源:

1. [movieName]
   - 类型:[type 转换为中文]
   - 百度网盘:[baiduLink]
   - 夸克网盘:[quarkLink]
   - 更新时间:[updateTime]

2. ...

类型映射:

  • TV: 电视剧
  • TV_4K: 电视剧(4K)
  • MOVIE: 电影
  • MOVIE_4K: 电影(4K)
  • ANIME: 动漫
  • ANIME_4K: 动漫(4K)

注意事项

  1. keyword 需要进行 URL 编码
  2. 如果没有找到结果(data 为空数组),告知用户未找到相关资源
  3. 如果 API 返回错误(code 不为 0),告知用户查询失败
  4. 优先展示热门资源(hot 为 true)
  5. 如果有多个版本(1080P、4K等),都展示给用户选择

Comments

Loading comments...