Tautullu

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: ad8f7278306c4ef6f6755caba86f0d02a6d0b9baf7db4d0c80ebb23bee5f132b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle for Tautulli is benign. All scripts (`activity.sh`, `history.sh`, `libraries.sh`, `recent.sh`, `server.sh`, `users.sh`) use `curl` to interact with a user-configured Tautulli API endpoint, fetching and displaying data using `jq`. The `TAUTULLI_URL` and `TAUTULLI_API_KEY` are explicitly required environment variables. There is no evidence of data exfiltration beyond the intended Tautulli API calls, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in `SKILL.md` or `README.md` that would lead to unauthorized actions.