Prowlarr

Search indexers and manage Prowlarr. Use when the user asks to "search for a torrent", "search indexers", "find a release", "check indexer status", "list indexers", "prowlarr search", "sync indexers", or mentions Prowlarr/indexer management.

This skill's code matches its description: it calls a Prowlarr instance using a URL and API key. However, the package metadata omits the config file path and required tools (curl, jq) that the script uses. Before installing: 1) review the included scripts yourself (they are present and readable) to confirm behavior; 2) only provide an API key for a Prowlarr instance you trust and prefer using environment variables with restricted file permissions if you store a config file (~/.clawdbot/credentials/prowlarr/config.json should be readable only by you); 3) ensure curl and jq are available on the agent runtime; 4) confirm the PROWLARR_URL points to an internal/trusted host (the script will send the API key to that URL); 5) ask the publisher to update metadata to list required config paths and binaries so the skill's declared requirements match what it actually needs. These inconsistencies are likely sloppy packaging rather than malicious, but verify before granting access to your Prowlarr API key.

Type: OpenClaw Skill Name: prowlarr Version: 1.0.0 The OpenClaw AgentSkills skill bundle for Prowlarr is classified as benign. The `scripts/prowlarr-api.sh` script correctly handles credentials by reading from a designated config file (`~/.clawdbot/credentials/prowlarr/config.json`) or environment variables. It uses `curl` to interact with the Prowlarr API and `jq` for JSON parsing and crucial URL encoding of user input, preventing command injection. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md`.