Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Forum Downloader

v1.0.2

从论坛帖子批量下载图片/视频到指定目录。支持需要代理访问的论坛(如 hjd2048),自动提取页面标题创建文件夹,PowerShell 脚本,UTF-8 BOM 编码。

0· 113·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zitao666/forum-downloader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Forum Downloader" (zitao666/forum-downloader) from ClawHub.
Skill page: https://clawhub.ai/zitao666/forum-downloader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: powershell
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install forum-downloader

ClawHub CLI

Package manager switcher

npx clawhub@latest install forum-downloader
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (bulk download images/videos from forum posts via proxy, PowerShell script, GBK handling) align with declared requirement of the powershell binary and the described PowerShell WebClient/WebProxy approach. No unrelated binaries, env vars, or config paths are requested.
Instruction Scope
SKILL.md stays focused on fetching pages via a user-provided proxy, parsing titles, and downloading media with PowerShell. However it instructs creating folders from page titles and writing files to a user-specified directory but does not mention filename/path sanitization, overwrite protection, size limits, or content validation. That omission increases risk (e.g., filenames with traversal characters, overwriting important files, or downloading unwanted/malicious content).
Install Mechanism
Instruction-only skill with no install spec and no external downloads — lowest-risk delivery model. Requiring an existing powershell binary is reasonable for a PowerShell script.
Credentials
No environment variables, credentials, or config paths are requested. The skill asks the user at run-time for a proxy address (not hard-coded) which is proportionate to the described proxy use-case.
Persistence & Privilege
always is false and the skill does not request persistent/system-wide changes. It will write files to directories the user specifies, which is expected behavior for a downloader but means the user should avoid sensitive system paths.
Assessment
This skill appears coherent for downloading forum images/videos using PowerShell. Before installing or running it: (1) only provide proxies you trust (the skill will use whatever proxy you give it); (2) avoid pointing the downloader at sensitive system directories—give an explicit safe folder; (3) ask whether the implementation sanitizes page titles and filenames (to prevent directory traversal or invalid characters) and whether it prevents overwriting files; (4) be cautious about legal/copyright or malware risks from downloaded content; and (5) if you need stronger guarantees, request that the skill include filename sanitization, file-size limits, content-type checks, and a dry-run mode that lists files before downloading.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📥 Clawdis
Binspowershell
latestvk978b7dh9d62r2bzzah85hx55x83pjkg
113downloads
0stars
3versions
Updated 1mo ago
v1.0.2
MIT-0

Forum Downloader

从论坛帖子批量下载图片或视频,保存到用户指定目录。

适用场景

  • hjd2048、2048 等需要代理访问的论坛
  • 帖子内含多张图片或附件视频
  • 自动用页面标题创建文件夹

使用方式

提供论坛帖子 URL,我会自动:

  1. 通过代理获取页面内容
  2. 用 GBK/GB2312 编码正确提取标题
  3. 在用户指定目录下创建 {标题} 文件夹
  4. 解析页面中的图片/附件 URL
  5. 用 PowerShell WebClient 下载全部文件

技术细节

  • 下载方式System.Net.WebClient + WebProxy
  • 脚本编码:UTF-8 with BOM(解决 PowerShell 中文路径变量问题)
  • 编码处理:论坛页面用 GBK 编码读取
  • 代理地址:从用户处获取(不硬编码)

示例

用户说 "下载到 D:\图片,使用 XXX 端口的代理":

  1. 创建目录:D:\图片\{页面标题}\
  2. 用用户提供的代理地址获取页面
  3. 解析图片 URL(data-original 属性)
  4. 批量下载

常见问题

Q: 代理端口不是 7890? → 告诉我实际的代理地址和端口。

Q: 图片是其他格式(jpeg/gif/webp)? → 脚本中用正则匹配所有图片扩展名,自动处理。

Q: 想下载视频而不是图片? → 同样适用,只需提供视频帖子的 URL。

Comments

Loading comments...