by fancydirty
Agent-driven media library for your cloud drives (Quark 夸克 / 115 / 光鸭 GuangYa / 123网盘 / 天翼 Tianyi)
# Add to your Claude Code skills
git clone https://github.com/fancydirty/mediary-scoutGuides for using ai agents skills like mediary-scout.
Last scanned: 9/8/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@electron/node-gyp: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@electron/rebuild: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@xmldom/xmldom: xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "app-builder-lib: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
"severity": "high"
},
{
"type": "npm-audit",
"message": "builder-util: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "builder-util-runtime: electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cacache: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dmg-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron: Electron has ASAR Integrity Bypass via resource modification",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-builder-squirrel-windows: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "electron-publish: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "extract-zip: extract-zip unvalidated symlink path traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass",
"severity": "high"
},
{
"type": "npm-audit",
"message": "js-yaml: JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported",
"severity": "high"
},
{
"type": "npm-audit",
"message": "make-fetch-happen: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: nanoid: non-secure generators can loop indefinitely with negative size",
"severity": "high"
},
{
"type": "npm-audit",
"message": "next: Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale",
"severity": "high"
},
{
"type": "npm-audit",
"message": "node-gyp: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sharp: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "undici: undici vulnerable to downstream response desynchronization via retry interceptor",
"severity": "high"
}
],
"status": "FAILED",
"scannedAt": "2026-09-08T08:38:06.734Z",
"npmAuditRan": true,
"pipAuditRan": false,
"promptInjectionRan": true
}See how mediary-scout compares with popular alternatives.
mediary-scout is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by fancydirty. Agent-driven media library for your cloud drives (Quark 夸克 / 115 / 光鸭 GuangYa / 123网盘 / 天翼 Tianyi). It has 1,563 GitHub stars.
mediary-scout failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/fancydirty/mediary-scout" and add it to your Claude Code skills directory (see the Installation section above). mediary-scout ships a SKILL.md manifest, so compatible agents can discover and load it automatically.
mediary-scout is primarily written in TypeScript. It is open-source under fancydirty on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh mediary-scout against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Before any clawd-media-track reasoning or tool use:
references/00-bootstrap-init.mdreferences/01-environment-contract.mdreferences/02-global-constraints.mdreferences/03-methods-reference.md[Type X - Step N]DO NOT:
This system can make destructive or rate-limit-sensitive 115 calls if used carelessly.
Read the references in order and follow the checklist for the current task type. Do not improvise around them.
In particular:
flatten_directory() is only valid on final landing directories:
MOVIES_CIDSeason <number>list_files() is shallow by default. Recursive scans on protected directories are blocked for safety.SAFETY_VIOLATION, stop and report the exact target/path instead of retrying with guesses.This skill is split for progressive loading.
Read only what is needed, but never skip required safety/rules for the current task type.
For any clawd-media-track task, read in this order:
references/00-bootstrap-init.md (init gate for bootstrap Step 1 and Step 2)references/01-environment-contract.md (required config contract after bootstrap)references/02-global-constraints.md (hard safety rules + execution protocol)references/03-methods-reference.md (allowed module methods only)Then route by task type:
references/05-type1-checklist.mdreferences/06-type2-checklist.mdreferences/07-type3-checklist.mdRead additional references when needed:
references/04-error-and-dedup-rules.mdreferences/08-directory-and-mistakes.md.each(); DO NOT slice/sample/top-N themIf any hard rule is violated, stop and report failure instead of improvising.
./.venv/bin/pythonreferences/00-bootstrap-init.mdreferences/01-environment-contract.mdreferences/02-global-constraints.mdreferences/03-methods-reference.mdreferences/04-error-and-dedup-rules.mdreferences/05-type1-checklist.mdreferences/06-type2-checklist.mdreferences/07-type3-checklist.mdreferences/08-directory-and-mistakes.mdThis refactor keeps original procedural content but routes detailed material into references for reliability and context efficiency.
你说要哪部电影、剧或番,agent 自己去搜资源,挑最合适的转存进你自己的网盘(夸克 / 115 / 光鸭 / 123 / 天翼),转完读回来确认真的到了,之后缺哪集还会接着补。
点击前往下载:GitHub Releases(macOS / Windows 桌面版)
点击前往赏饭:要饭嘛,不寒碜
交流:本项目积极参与并认可 LINUX DO 社区,许多用户在那里自部署、交流网盘经验,部署问题也能很快得到回应。

| 平台 | 下载 | 说明 |
|---|---|---|
| macOS(Apple 芯片) | .dmg | 已签名公证,直接打开 |
| Windows(x64) | .exe | 未签名,SmartScreen 弹窗时点「仍要运行」 |
安装后打开 → 在设置里连网盘、填 AI 模型 → 搜片点「获取」。有新版本时应用会提示你下载。
git clone https://github.com/fancydirty/mediary-scout && cd mediary-scout
docker compose up -d
打开 http://<主机IP>:3000,在设置里配置。以后在 设置 → 更新 里一键升级,也可以设成每天自动更新。国内构建加速、Tailscale / Cloudflare Tunnel 远程访问、多用户、备份,以及让 AI agent 替你部署的提示词,都在 部署指南。
| 桌面版 | Docker | |
|---|---|---|
| 适合 | 自己用,Mac / Windows | NAS、服务器,常开 |
| 定时巡检补缺 | 应用开着时才跑 | 24 小时 |
| 多用户 | 不支持 | 支持 |
| 手机、出门访问 | 仅本机 | Tailscale / Cloudflare Tunnel |
两种形态下,自带 OpenAI 兼容的 AI 模型接口都是可选升级(key 只存在你自己的实例里)。未配置 AI 模型时,默认使用 Kilo Code 的公共免费模型池(无需注册;获取任务的对话上下文——搜索查询、任务与留言内容、候选结果、文件名等——会发送给 Kilo 及其上游模型提供商)。影视信息开箱即用。资源搜索用 PanSou:Docker 版自带一个,桌面版默认用公共实例,可以在设置里换成你自己的;可选再接 Prowlarr 找磁力。
各盘资源量对比、为什么只支持这五家:网盘评估。
巡影是开源、自部署的软件,不提供、也永远不会提供托管服务:你自己跑实例,自带网盘和 AI 模型的凭证。它做的就是你本可以在自己网盘里手动完成的那些文件操作。详见项目定位。与 115、夸克、光鸭、123、天翼、TMDB 及任何索引器均无隶属关系。
drivers/guangyapan)