Sonarr

Search and add TV shows to Sonarr. Supports monitor options, search-on-add.

Security Scan

The skill is internally consistent with its stated purpose (controlling a local Sonarr instance via its API); it asks only for a local config file containing the Sonarr URL and API key and contains a shell wrapper that uses curl/jq to call the Sonarr API.

Purpose & Capability

The skill's purpose (search/add/remove shows in Sonarr) matches the included script and instructions: the script calls the Sonarr API and requires only a Sonarr URL and API key stored in ~/.clawdbot/credentials/sonarr/config.json. Minor inconsistency: the registry metadata reported no required binaries, but the SKILL.md front-matter and the script clearly require curl and jq.

Instruction Scope

SKILL.md and the script stay within the Sonarr domain: they read the local config JSON and call Sonarr endpoints. Two small mismatches to be aware of: SKILL.md instructs that results should be presented with clickable TVDB links in the format https://thetvdb.com/series/SLUG, but the script prints numbered plaintext lines and constructs links using https://thetvdb.com/dereferrer/series/<tvdbId> (uses tvdbId, not slug). Also SKILL.md front-matter lists required bins (curl, jq) while registry metadata listed none.

Install Mechanism

There is no install spec (instruction-only plus a bundled script). No network downloads or extraction steps are performed by the skill itself. Risk is limited to executing the included shell script on the host.

Credentials

No environment variables or external credentials are requested. The only credential is the Sonarr API key stored in a local JSON file under the user's home directory, which is proportional to the skill's needs. Recommendation: keep that config file protected with appropriate filesystem permissions since it contains an API key.

Persistence & Privilege

always:false and the skill does not request persistent or system-wide changes. It does not alter other skills or agent-wide settings. The skill can be invoked autonomously (platform default), but that is expected and not combined with other concerning privileges here.

Assessment

This skill appears to do what it claims: it calls your Sonarr API to search/add/remove shows. Before installing, verify you have curl and jq on the agent host, review the included scripts/sonarr.sh (it will run curl and jq locally), and create the config file at ~/.clawdbot/credentials/sonarr/config.json with your Sonarr URL and API key. Ensure that file is readable only by you (restrict permissions) because it contains a secret. Note the remove command can delete media files when run with --delete-files — the skill warns to ask the user before deleting, so make sure your agent interaction enforces that confirmation. If you rely on the SKILL.md requirement that results be displayed as clickable markdown links, be aware the bundled script prints plain text numbered results and uses a /dereferrer/ TVDB URL with the tvdbId, so you may need to adjust formatting or the script if you need exact markdown links or a slug-based URL.

Add TV shows to your Sonarr library.

Setup

Create ~/.clawdbot/credentials/sonarr/config.json:

{
  "url": "http://localhost:8989",
  "apiKey": "your-api-key",
  "defaultQualityProfile": 1
}

• defaultQualityProfile: Quality profile ID (run config to see options)

Workflow

1. Search: search "Show Name" - returns numbered list
2. Present results with TVDB links - always show clickable links
3. Check: User picks a number
4. Add: Add show and start search

Important

• Always include TVDB links when presenting search results to user
• Format: [Title (Year)](https://thetvdb.com/series/SLUG)
• Uses defaultQualityProfile from config; can override per-add

Commands

Search for shows

bash scripts/sonarr.sh search "Breaking Bad"

Check if show exists in library

bash scripts/sonarr.sh exists <tvdbId>

Add a show (searches immediately by default)

bash scripts/sonarr.sh add <tvdbId>              # searches right away
bash scripts/sonarr.sh add <tvdbId> --no-search  # don't search

Remove a show

bash scripts/sonarr.sh remove <tvdbId>                # keep files
bash scripts/sonarr.sh remove <tvdbId> --delete-files # delete files too

Always ask user if they want to delete files when removing!

Get root folders & quality profiles (for config)

bash scripts/sonarr.sh config