Seerr Media Requests

Search for movies and TV shows via a Seerr instance and request them for download. Use when the user asks to download, find, request, or queue a movie or TV...

Before installing: 1) Note that SKILL.md requires SEERR_URL and SEERR_API_KEY (an API key). The registry metadata did not declare these — ask the publisher to update the manifest so the platform can surface the secret requirement. 2) Only provide SEERR_API_KEY if you trust the Seerr instance and the skill author; treat it as a secret and verify how the platform stores it. 3) Understand that the skill will auto-request items (POST /api/v1/request) which can trigger downloads via Radarr/Sonarr — if you don't want automatic requests, request a version that asks for explicit confirmation before POSTing. 4) Test on a local or non-production Seerr instance first. 5) If you use this in Discord, verify the channel IDs and that the agent's messaging permissions are limited. 6) If possible, create a Seerr API key with minimal permissions and ask the developer to declare required env vars in the registry so the platform can enforce least-privilege handling.

Type: OpenClaw Skill Name: seerr Version: 1.5.0 The skill bundle uses `curl` commands to interact with a Seerr instance, requiring `SEERR_URL` and `SEERR_API_KEY` from environment variables. The `SKILL.md` provides `curl` command templates that directly embed parameters like `PERCENT_ENCODED_QUERY` and `TMDB_ID`. If the OpenClaw agent does not properly sanitize or escape user-provided input before interpolating it into these `curl` commands, it could lead to command injection or JSON injection vulnerabilities, particularly in the `query` parameter of the search API call. While there is no explicit malicious intent in the skill's instructions, this pattern represents a significant vulnerability if the agent's execution environment is not robustly secured against such input.