技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.4.0
统计：⭐ 0 · 994 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：良性
Package：abdul-karim-mia/terabox-link-extractor
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：良性
OpenClaw 评估
The skill's code, runtime instructions, and required API key are consistent with its stated purpose (calling XAPIverse to extract TeraBox links), but it will transmit the user-supplied URL and your TERABOX_API_KEY to the third-party service — review trust and privacy before enabling.
目的
Name/description, node requirement, and TERABOX_API_KEY map directly to the code's behavior: scripts/extract.js posts the provided TeraBox URL to https://xapiverse.com/api/terabox-pro and returns download/stream links. There are no unrelated environment variables or binaries requested.
说明范围
SKILL.md explicitly requires informed user consent before sending a URL and documents that the full target URL and API key are transmitted to xapiverse.com. The handler delegates consent handling to the LLM as described. This is within scope for an extraction skill, but it does mean user-provided URLs and the API key will leave the host environment.
安装机制
No install script or remote downloads are present; the skill requires only a local Node runtime and contains plain JS files. There is no suspicious installer or external archive retrieval.
证书
Only one required credential (TERABOX_API_KEY) is declared and actually used. The code supports multiple comma-separated keys, which is reasonable for failover. The key is sent to the documented external API (xapiverse.com) — this is necessary for the service but is a privacy/secret-exposure consideration, not an incoherence.
持久
The skill does not request permanent/always-on inclusion and does not attempt to modify other skills or system-wide agent settings. Downloads are sandboxed to a local Downloads/ directory per the code's checks.
综合结论
This skill appears to do what it says: it sends a TeraBox link and your TERABOX_API_KEY to XAPIverse (https://xapiverse.com) to obtain direct download/stream URLs. Before installing: (1) Verify you trust the XAPIverse service and its privacy/terms, because your API key and the full target URL will be transmitted there. (2) Use a dedicated, limited-scope API key (do not reuse high-privilege secrets). (3) Confirm that extracting and downloading …
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Terabox Link Extractor」。简介：Direct link extraction from TeraBox URLs using the XAPIverse protocol. Extracts…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/abdul-karim-mia/terabox-link-extractor/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。