Radarr
v1.0.1Search and add movies to Radarr. Supports collections, search-on-add option.
⭐ 1· 3.2k·23 current·24 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The script implements Radarr API interactions (search, add, remove, collection monitoring), which matches the skill name/description. However the registry metadata claims no required binaries/configs while the SKILL.md and scripts require curl, jq, and a config file at ~/.clawdbot/credentials/radarr/config.json — that discrepancy is unexpected.
Instruction Scope
SKILL.md and the script limit actions to Radarr API calls and presenting TMDB links. The instructions only read the declared local config file and interact with the Radarr API; they do not attempt to read unrelated system files or transmit data to unknown endpoints.
Install Mechanism
No install spec (instruction-only) and the included shell script are present. Nothing is downloaded from external arbitrary URLs and no archives are extracted; risk from install mechanism is low.
Credentials
The skill requires a Radarr API key and URL stored in a local config file, which is proportional to its purpose. But the registry metadata lists no required env vars or config paths (and required binaries are omitted), and no primary credential is declared — metadata and runtime needs are inconsistent, which could lead to users misconfiguring credentials or being unaware of what secrets are needed.
Persistence & Privilege
The skill does not request permanent/always-on inclusion, does not modify other skills or system settings, and only reads/writes its own config file path per SKILL.md. Autonomy (model invocation) is allowed by default but not combined with other high-risk behaviors.
What to consider before installing
This skill appears to be a straightforward Radarr API wrapper, but the package metadata is inconsistent with the runtime instructions and script. Before installing or running it:
- Confirm the presence of curl and jq on the agent environment (SKILL.md requires them). The registry incorrectly lists no required binaries.
- Create the config file ~/.clawdbot/credentials/radarr/config.json with your Radarr URL and API key as instructed; the metadata did not declare this config path or credential. Treat the API key as a secret.
- Verify the provided Radarr URL is the intended instance (localhost vs remote). The script will send the API key to whatever URL you put in config.json.
- If you want the agent to run this skill autonomously, be aware it can add/remove movies and enable collection monitoring on the configured Radarr instance — ensure you trust the agent and the configured Radarr endpoint.
Resolve the metadata discrepancies (required binaries and config path) or obtain an updated package from a trusted source before use. If you want, provide the registry/packaging source so these inconsistencies can be checked further.Like a lobster shell, security has layers — review code before you run it.
latestvk97fjv4wkmn8p0z9z600ar6f017yw4dn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Binscurl, jq