sonarr
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses environment variables (
~/.claude-homelab/.env) to handle sensitive API keys and URLs safely, following standard secret management practices. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external APIs (TV show search descriptions from Sonarr/TVDB).
- Ingestion points: Data enters the context through
scripts/sonarr.shvia thesearchandsearch-jsonsubcommands when fetching series metadata. - Boundary markers: No specific LLM boundaries are enforced around the fetched metadata text.
- Capability inventory: Capabilities are limited to standard HTTP REST calls via
curlto a Sonarr API instance to manage TV series libraries. - Sanitization: The script securely sanitizes user inputs by utilizing
jq -sRr @urifor URL encoding andjq --argfor JSON payload construction, safely preventing shell or command injection.
Audit Metadata