Commit graph

7 commits

Author SHA1 Message Date
Deivid Soto
42cf17d5a8 fix(security): use --data-urlencode in SKILL.md curl commands
Some checks failed
CI / Lint commits (push) Failing after 0s
CI / Lint shell scripts (push) Failing after 1s
CI / Security patterns check (push) Failing after 1s
2026-02-16 11:44:34 +01:00
Deivid Soto
d3d6c702ed fix(security): eliminate shell injection and add input validation
Replace unsafe string interpolation in aria2 RPC JSON construction
with jq --arg for proper escaping. Add magnet URL format validation
to reject arbitrary input. Refactor detect-client.sh JSON output
to use jq. Add CI security check to prevent regression.

Resolves VirusTotal "Suspicious" classification caused by the
shell injection vulnerability in add-torrent.sh.
2026-02-15 10:47:10 +01:00
Deivid Soto
5d409c4a66 docs(SKILL.md): clarify API key is optional and use env var consistently 2026-02-14 10:02:54 +01:00
Deivid Soto
913f22fb24 fix(detect-client): detect transmission-gtk and qt variants 2026-02-13 20:38:02 +01:00
Deivid Soto
1363ebaf76 docs: align API docs with OpenAPI spec and improve ClawHub discoverability 2026-02-13 20:37:32 +01:00
Deivid Soto
98c550feb0 feat: initial open-source project structure
Agent Skill for searching and downloading torrents via TorrentClaw.
Includes SKILL.md with OpenClaw metadata, bash scripts for torrent
client detection, CONTRIBUTING.md, CHANGELOG.md, CI/CD with GitHub
Actions (shellcheck + conventional commits), lefthook git hooks,
Makefile, and .editorconfig.
2026-02-13 18:40:53 +01:00
Deivid Soto
b0c4fc2e21 Initial commit 2026-02-13 10:55:12 +01:00