libby-book-monitor
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your book search terms and selected library code may be sent to OverDrive's API when searching or checking the watchlist.
The script sends user-supplied library codes and book search queries to the OverDrive Thunder API, which is expected for catalogue lookup.
API_BASE = "https://thunder.api.overdrive.com/v2/libraries"
Use the skill only for searches you are comfortable sending to the OverDrive/Libby catalogue service.
Your watchlist can persist on disk and be reused by later checks or profiles.
The skill keeps persistent local state containing watchlist/config information, which is necessary for monitoring but may reveal reading interests.
Data stored in `~/.libby-book-monitor/` (configurable via `--data-dir` or `$LIBBY_BOOK_MONITOR_DATA`)
Review or delete `~/.libby-book-monitor/` if you no longer want the watchlist stored, or use `--data-dir` for a specific location.
If you choose to set up automation, the skill may keep checking your watchlist on a schedule.
The documentation suggests optional recurring automation, such as daily checks, but frames it as something the user asks the agent to configure.
Ask your AI agent to set up recurring checks
Only enable recurring checks intentionally, and make sure you know where the schedule or notification rule is configured so you can disable it.
