moviepilot-api

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs configuring and calling the API by passing the API token directly (e.g., --apikey <API_TOKEN>, --token-param / ?token= and X-API-KEY), which requires embedding the secret verbatim in commands/requests and thus can expose secrets via LLM output.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly calls public, user-generated sources (e.g., /api/v1/search/media, /api/v1/recommend/douban_movies, /api/v1/plugin/remotes, and shared workflows/plugins) and the SKILL.md "Common Workflows" show the agent must read those API responses (e.g., extracting a torrent URL from /api/v1/search/media) and act on them, so untrusted third‑party content can materially influence subsequent tool use.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill exposes a script and full REST API surface that can modify application and host state (create/delete users in the app, install/uninstall plugins, change system config, restart the service, manipulate storage/files, call MCP tools), which enables privileged/impactful changes to the machine/service even though it does not explicitly request sudo.