jellyseerr is an AI agent skill, created by ericrosenberg and published at openclaw/skills. ClawSecure audited jellyseerr across 15 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 16 findings concentrate in Data Exfiltration, Transitive Trust Abuse and Unauthorized Tool Use, including Pattern detected: chmod 600 and Pattern detected: requests.post(. 4 were rated high or critical severity.
Is jellyseerr safe?
ClawSecure audited jellyseerr and assigned a security score of 0/100 (High Risk), identifying 16 findings across Data Exfiltration and Transitive Trust Abuse. Review the findings below before installing.
What did ClawSecure find in jellyseerr?
ClawSecure identified 16 findings in jellyseerr, concentrated in Data Exfiltration, Transitive Trust Abuse and Unauthorized Tool Use. 4 were rated high or critical severity. The most severe include Pattern detected: chmod 600 and Pattern detected: requests.post(.
How was jellyseerr audited?
ClawSecure ran jellyseerr through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 15 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned jellyseerr a security score of 0/100, placing it in the High Risk range. This is driven by 16 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for jellyseerr
ClawSecure detected 16 security findings in jellyseerr, spanning Data Exfiltration, Transitive Trust Abuse, Unauthorized Tool Use and Obfuscation.
- critical · Pattern detected: chmod 600. Unauthorized Tool Use finding detected in
scripts/setup.sh:37. - critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
scripts/request_tv.py:52. - critical · Pattern detected: __import__(. Command Injection finding detected in
scripts/monitor_availability.py:77. - critical · Pattern detected: requests.post(. Data Exfiltration finding detected in
scripts/request_movie.py:51. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/search.py:8. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/request_tv.py:8. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/monitor_availability.py:8. - medium · Pattern detected:.... Obfuscation finding detected in
scripts/setup_webhook.sh:42. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/request_movie.py:8. - medium · Skill code uses network libraries but doesn't declare network.... Unauthorized Tool Use finding.
- medium · Pattern detected:.... Obfuscation finding detected in
references/WEBHOOK_SETUP.md:46. - medium · Detects indirect prompt injection via instruction manipulation from.... Transitive Trust Abuse finding detected in
scripts/search.py:14.
Showing the 12 highest-severity of 16 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for jellyseerr
Audit external network connections
Review obfuscated or hidden code
Resolve policy violations
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 7, 2026. jellyseerr is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.