Download AnythingBLOCK
MyAgents - 优雅、易用的 Agent 桌面端 ,一站式 Agent 工作台与任务中心
Overview
MyAgents - 优雅、易用的 Agent 桌面端 ,一站式 Agent 工作台与任务中心
4c8877d62402OBSERVED · 2026-10-12Install
Commands as the repository documents them. They are shown, not run.
pip install spotdl
pip install gdown
pip install spotdl aria2p you-get streamlink
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: download-anything description: > Find and download virtually any digital resource from the internet — ebooks, academic papers, movies, TV shows, music, software, images, fonts, courses, and more. Covers both English and Chinese internet ecosystems. Includes CLI tool workflows (yt-dlp, aria2, gallery-dl, spotdl), resource site directories, cloud drive search engines (百度/阿里/夸克网盘搜索), and search techniques (Google dorks). Use when the user wants to: (1) download a video, audio, or media from a URL, (2) find and download an ebook or academic paper, (3) find and download software, (4) search for any digital resource, (5) batch download images or media from a gallery/site, (6) download torrents or magnet links, (7) find free stock assets (images, video, audio, fonts), (8) search Chinese cloud drives for resources, or (9) any task involving finding or downloading digital content from the internet. metadata: author: MyAgents --- # Download Anything Find it. Download it. Any resource, any format. ## Toolkit ```bash # Install all tools at once bash scripts/install-toolkit.sh ``` | Tool | Install | Purpose | |------|---------|---------| | `yt-dlp` | `brew install yt-dlp` | Video/audio from 1800+ sites | | `aria2c` | `brew install aria2` | Multi-thread downloads, torrents | | `gallery-dl` | `pip3 install gallery-dl` | Batch image/media, 170+ sites | | `spotdl` | `pip3 install spotdl` | Spotify playlists → local files | | `wget` | `brew install wget` | Recursive downloads, site mirroring | | `curl` | pre-installed | HTTP requests, API calls | | `ffmpeg` | `brew install ffmpeg` | Media conversion | | `jq` | `brew install jq` | JSON parsing for automation | ## Decision Tree | Want to download... | Tool / Approach | |---------------------|----------------| | YouTube / social media video | `scripts/dl-video.sh URL` (auto-detects Bilibili cookies) | | Audio from any video URL | `scripts/dl-audio.sh URL` | | Spotify playlist/album/track | `spotdl URL` | | Images from gallery/artist page | `scripts/dl-gallery.sh URL` | | A direct file URL (fast) | `scripts/dl-file.sh URL` (aria2, 16 connections) | | A torrent or magnet link | `scripts/dl-torrent.sh "magnet:..."` | | Subtitles for a video | `scripts/dl-subtitle.sh QUERY` | | An ebook or paper | → [references/ebooks.md](references/ebooks.md) | | A movie or TV show | → [references/video.md](references/video.md) | | Music / game soundtracks / OST | → [references/music.md](references/music.md) | | Software or app | → [references/software.md](references/software.md) | | Stock images/video/audio/fonts | → [references/media-assets.md](references/media-assets.md) | | Chinese cloud drive resources | → [references/cloud-search.md](references/cloud-search.md) | | Online courses | → [references/education.md](references/education.md) | | Something else / not sure | → [references/search-techniques.md](references/search-techniques.md) | ## Scripts All in `scripts/`. Each does one thing. Compose as needed. | Script | What it does | Key args | |--------|-------------|----------| | `install-toolkit.sh` | Install all CLI tools | — | | `dl-video.sh URL [QUALITY]` | Download video (auto cookies for Bilibili) | `best`/`1080`/`720`/`480` | | `dl-audio.sh URL [FORMAT]` | Extract audio | `mp3`/`opus`/`flac`/`best` | | `dl-file.sh URL [OUTPUT]` | Fast multi-thread download | 16 connections via aria2 | | `dl-gallery.sh URL [DIR] [ARGS...]` | Batch download images | extra args passed to gallery-dl | | `dl-torrent.sh MAGNET [DIR]` | Download torrent/magnet | via aria2 | | `dl-subtitle.sh QUERY [LANG]` | Search & download subtitles | `en`/`zh`/`ja` etc. | ## Quick One-Liners ```bash # Best quality video yt-dlp -f "bv*+ba/b" "URL" # 1080p video + subtitles yt-dlp -f "bv[height<=1080]+ba/b" --write-subs --sub-langs "en,zh" "URL" # Extract audio as MP3 yt-dlp -x --audio-format mp3 "URL" # Download YouTube playlist yt-dlp --yes-playlist "URL" # Fast file download (16 connections) aria2c -x16 -s16 -k1M "URL" # Download magnet aria2c --seed-time=0 "magnet:?xt=..." # Batch images from gallery gallery-dl "URL" # Spotify album → local MP3s spotdl "SPOTIFY_URL" # All PDFs from a page wget -r -l1 -A "*.pdf" "URL" # Video metadata as JSON (automation) yt-dlp -j "URL" # Get direct URL without downloading yt-dlp -g "URL" ``` ## Agent Automation Patterns **Video pipeline:** `yt-dlp -j URL` → parse JSON → select format → `yt-dlp -f FORMAT URL -o OUTPUT` **Ebook search:** Search Anna's Archive / Z-Library / 鸠摩搜书 → get download page → extract link → `aria2c` **Bulk media:** `gallery-dl --dump-json URL` → review items → `gallery-dl -d OUTPUT URL` **Music:** `spotdl SPOTIFY_URL` (auto YouTube match + metadata) or `yt-dlp -x --audio-format mp3 YOUTUBE_URL` ## Domain Instability Many resource sites rotate domains. When a URL fails: 1. Search: `[site name] mirror 2026` or `[站名] 最新地址` 2. Check Reddit/Twitter for community mirror lists 3. Anna's Archive = most resilient ebook meta-search 4. For Chinese cloud search: check 网盘之家导航 for latest links ## References | File | Content | |------|---------| | [ebooks.md](references/ebooks.md) | Ebook sites, academic papers, audiobooks, manga, Chinese books | | [video.md](references/video.md) | Torrent sites, DDL, subtitles, anime, Chinese video | | [music.md](references/music.md) | Free music, download tools, Chinese music, podcasts | | [software.md](references/software.md) | Software archives, package managers, Chinese sites | | [media-assets.md](references/media-assets.md) | Stock images, video, audio, fonts | | [cloud-search.md](references/cloud-search.md) | Chinese cloud drive search (百度/阿里/夸克) | | [education.md](references/education.md) | Free courses and MOOCs | | [tools-reference.md](references/tools-reference.md) | Detailed CLI syntax and advanced flags | | [search-techniques.md](references/search-techniques.md) | Google dorks, search strategies |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (4 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (4)
sudo apt-get install -y aria2 wget ffmpeg jq 2>/dev/null || true
sudo dnf install -y aria2 wget ffmpeg jq 2>/dev/null || true
AGENTS.md
system use found in code, not declared in the description
Gates applied: no_behavioural_pass.
4c8877d62402full audit observations/trust-audit/skill/hacklyc__download-anything.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 4c8877d62402 | BLOCK | D | 69 | first audit |
Questions
What does the Download Anything skill do?
MyAgents - 优雅、易用的 Agent 桌面端 ,一站式 Agent 工作台与任务中心
Is Download Anything safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can Download Anything access on my machine?
The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: none found.
How current is this page?
The grade is for one exact copy of the source (4c8877d62402), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.