Lidarr

• Analyzed: May 12, 2026, 3:25 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9ec9386348fb8de2e664ee2402692aa7a36bc317716666991e50558576ab414d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Lidarr skill is benign. It correctly uses `curl` and `jq` to interact with a user-configured Lidarr API, reading credentials from the designated `~/.clawdbot/credentials/lidarr/config.json` file. User input is properly URL-encoded using `jq -sRr @uri` before being passed to `curl`, mitigating command injection risks. The `SKILL.md` provides clear instructions without any prompt injection attempts against the agent. All network activity is confined to the specified Lidarr instance, and there is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.