ZLibrary2Kindle

• Analyzed: May 10, 2026, 1:04 AM
• Findings: 1
• Version: 0.1.1
• Hash: 6abe370fa6c8840d6dfab991fbd37d8d894d98a5ee4f35989e23cce30293b778
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a CLI interface to search, download, and email books from Z-Library to a Kindle device. It requires high-risk sensitive information, including Z-Library credentials and Gmail SMTP App Passwords, stored as environment variables. While the instructions in skill.md are transparent and align with the stated functionality, the handling of plain-text credentials and the execution of an external package (zlibrary2kindle) via uvx or pip pose a potential security risk, as the skill relies on the integrity of an external third-party dependency to handle these secrets.