Back to skill
Skillv1.0.10

VirusTotal security

Calibre Catalog Read · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 3:46 AM
Hash
b03697c758e853afb6188c0ab4dfbce707c8f44036354e551f98422ed6ae587e
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: calibre-catalog-read Version: 1.0.10 The skill bundle provides a legitimate and well-structured workflow for querying a Calibre library and performing AI-based book analysis. It includes robust scripts for managing a local SQLite cache (analysis_db.py), wrapping the calibredb CLI (calibredb_read.mjs), and orchestrating a subagent pipeline for text extraction and summarization (run_analysis_pipeline.py). Security-conscious patterns are evident, such as the use of parameterized SQL queries, array-based command execution to prevent shell injection, and a 'strict read contract' in the subagent prompt (subagent-analysis.prompt.md) designed to prevent unauthorized file access by the AI. The skill's requirement for Calibre credentials and network access to a Content Server is consistent with its stated purpose.
External report
View on VirusTotal