Security audit

prowlarr-search

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Prowlarr search helper, with a credential-handling caveat users should understand.

Install this only if you intend to let the skill query your Prowlarr instance. Prefer a localhost or trusted HTTPS PROWLARR_BASE_URL, avoid sending the key through untrusted proxies, and rotate the Prowlarr API key if request URLs may have been logged.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/prowlarr-search.py:47
Finding: Prowlarr API Key Exposed in Request URL
Content: View full analysis
`. 4. The destination, an intermediary proxy, an access-log system, or a party monitoring unencrypted traffic captures the URL. 5. An attacker retrieves the API key from the captured request or logs. 6. The attacker submits authenticated requests to the reachable Prowlarr API using the stolen key. ### Impact Assessment A disclosed key permits access within the authorization scope granted by that Pro ...[truncated 503 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 92% confidence
Finding: The skill invokes a Python script that relies on environment variables and performs outbound API requests to Prowlarr, but the manifest does not declare an explicit tool scope such as permissions or allowed-tools. This weakens policy enforcement and reviewability because the skill's actual capabilities are broader than what is formally declared, increasing the chance of unintended network access or secret use.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: This code file contains natural-language strings such as the module docstring and function docstring entirely in Chinese. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which it is not here.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill name and instructions are presented in Chinese, including the description and usage headings, with no indication that another language is supported or that the locale restriction is intentional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Content: No source excerpt is available for this finding.