ClawHub
Back to skill

Security audit

Sonarr

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Sonarr helper, but it can change your media library and start download searches if used that way.

Install only if you want an agent to operate your Sonarr instance. Keep the API key private with restrictive file permissions, and require explicit confirmation before adding series, triggering all-missing searches, deleting episode files, or removing queue items.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The documentation includes a POST request that adds a series with `searchForMissingEpisodes:true`, which changes Sonarr state and can immediately initiate download activity. In a skill context, presenting this as a normal workflow without a clear warning increases the chance an agent or user will trigger unintended media acquisition and library changes.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
The `MissingEpisodeSearch` command can trigger bulk searches across the library and cause substantial downstream download activity through connected indexers and download clients. Omitting a warning in a reusable skill makes accidental mass actions more likely, especially for automated agents that may treat documented commands as safe defaults.

Static analysis

No suspicious patterns detected.