Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent Radarr helper, but it exposes authenticated actions that can add, delete, and bulk-search movies without clear confirmation or safety guidance.
Install only if you want an agent to operate your Radarr instance. Before allowing mutating commands, require explicit confirmation for adding movies, bulk missing-movie searches, DELETE endpoints, queue blacklisting, renaming, and rescans; keep the Radarr API key secret and limit the agent to the intended local Radarr server.
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
# 1. Look up by title (returns TMDB results)
curl -s "$RADARR_URL/api/v3/movie/lookup?term=The+Matrix" \
-H "X-Api-Key: $RADARR_KEY" | python3 -c "
import sys,json
results = json.load(sys.stdin)
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
"
# 2. Get quality profiles and root folders
curl -s "$RADARR_URL/api/v3/qualityprofile" -H "X-Api-Key: $RADARR_KEY"
curl -s "$RADARR_URL/api/v3/rootfolder" -H "X-Api-Key: $RADARR_KEY"
# 3. Add the movie
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s -X POST "$RADARR_URL/api/v3/command" \
-H "X-Api-Key: $RADARR_KEY" \
-H "Content-Type: application/json" \
-d '{"name":"MissingMoviesSearch"}'
The skill documents multiple state-changing Radarr operations, including adding movies and triggering searches/download workflows, without any warning that these actions modify the user's media library and may consume network, storage, and downloader resources. In an agentic setting, this can cause unintended changes or bulk activity if the skill is invoked without explicit user confirmation.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"
# 2. Get quality profiles and root folders
curl -s "$RADARR_URL/api/v3/qualityprofile" -H "X-Api-Key: $RADARR_KEY"
curl -s "$RADARR_URL/api/v3/rootfolder" -H "X-Api-Key: $RADARR_KEY"
# 3. Add the movie
Although the request targets localhost, it is a state-changing authenticated command that initiates a bulk search for all missing movies, which can cascade into downloader activity and significant system changes. In an autonomous agent context, this creates risk of unintended outbound activity, resource usage, and media acquisition without explicit approval.
curl -s -X POST "$RADARR_URL/api/v3/command" \
-H "X-Api-Key: $RADARR_KEY" \
-H "Content-Type: application/json" \
-d '{"name":"MissingMoviesSearch"}'
The documentation exposes destructive DELETE operations and state-changing add/search commands without any warning, confirmation guidance, or safe-usage constraints. In an agent skill, this increases the chance that an automated consumer will remove movies, delete files, blacklist queue items, or trigger bulk searches/rescans without the user understanding the side effects.
The reference instructs use of an API key header but provides no warning that the credential is sensitive, must not be logged, echoed, or exposed to users. In an agent setting, missing secrecy guidance can lead to accidental leakage through debug output, tool traces, prompts, or error messages.
No suspicious patterns detected.