Back to skill
Skillv1.0.4
VirusTotal security
Calibre Metadata Apply · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 29, 2026, 3:49 AM
- Hash
- 207ddb7f4585ebcf3de91aab252e67b52e5c95225e3d427a6dc79584f50a2335
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: calibre-metadata-apply Version: 1.0.4 The calibre-metadata-apply skill bundle is a legitimate tool for managing Calibre book metadata via the calibredb CLI. The core logic in calibredb_apply.mjs uses safe process spawning (spawnSync with argument arrays) to prevent shell injection and includes features like password redaction and environment-based credential loading. The SKILL.md instructions establish strict safety protocols, including mandatory dry-runs and explicit user confirmation gates before any data is modified. While the scripts perform environment discovery (e.g., reading /etc/resolv.conf for WSL host detection and loading .env files), these actions are transparently documented and necessary for the tool's functionality in complex network environments. No indicators of malicious intent, data exfiltration, or unauthorized execution were identified.
- External report
- View on VirusTotal
