Back to skill
Skillv1.0.4

VirusTotal security

Calibre Metadata Apply · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 3:49 AM
Hash
207ddb7f4585ebcf3de91aab252e67b52e5c95225e3d427a6dc79584f50a2335
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: calibre-metadata-apply Version: 1.0.4 The calibre-metadata-apply skill bundle is a legitimate tool for managing Calibre book metadata via the calibredb CLI. The core logic in calibredb_apply.mjs uses safe process spawning (spawnSync with argument arrays) to prevent shell injection and includes features like password redaction and environment-based credential loading. The SKILL.md instructions establish strict safety protocols, including mandatory dry-runs and explicit user confirmation gates before any data is modified. While the scripts perform environment discovery (e.g., reading /etc/resolv.conf for WSL host detection and loading .env files), these actions are transparently documented and necessary for the tool's functionality in complex network environments. No indicators of malicious intent, data exfiltration, or unauthorized execution were identified.
External report
View on VirusTotal