trakt
Enables interaction with the Trakt API for managing watchlists, collections, ratings, and discovering new content.
Install this skill
Security score
The trakt skill was audited on Feb 9, 2026 and we found 40 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 44 | curl -X POST https://api.trakt.tv/sync/watchlist \ |
Curl to non-GitHub URL
| 54 | curl https://api.trakt.tv/sync/watchlist/movies \ |
Curl to non-GitHub URL
| 62 | curl -X POST https://api.trakt.tv/sync/watchlist/remove \ |
Curl to non-GitHub URL
| 74 | curl "https://api.trakt.tv/search/movie?query=inception" \ |
Curl to non-GitHub URL
| 81 | curl "https://api.trakt.tv/search/show?query=breaking+bad" \ |
Curl to non-GitHub URL
| 90 | curl https://api.trakt.tv/sync/history \ |
Curl to non-GitHub URL
| 98 | curl -X POST https://api.trakt.tv/sync/history \ |
Curl to non-GitHub URL
| 110 | curl https://api.trakt.tv/sync/collection/movies \ |
Curl to non-GitHub URL
| 118 | curl -X POST https://api.trakt.tv/sync/collection \ |
Curl to non-GitHub URL
| 130 | curl https://api.trakt.tv/sync/ratings/movies \ |
Curl to non-GitHub URL
| 138 | curl -X POST https://api.trakt.tv/sync/ratings \ |
Curl to non-GitHub URL
| 150 | curl https://api.trakt.tv/recommendations/movies?limit=10 \ |
Curl to non-GitHub URL
| 158 | curl https://api.trakt.tv/movies/trending \ |
Curl to non-GitHub URL
| 165 | curl https://api.trakt.tv/movies/popular \ |
Curl to non-GitHub URL
| 271 | RESPONSE=$(curl -s -X POST https://api.trakt.tv/oauth/token \ |
Curl to non-GitHub URL
| 299 | curl -X POST https://api.trakt.tv/sync/watchlist \ |
Curl to non-GitHub URL
| 314 | curl "https://api.trakt.tv/movies/trending?limit=10" \ |
Curl to non-GitHub URL
| 326 | curl -X POST https://api.trakt.tv/sync/ratings \ |
Access to hidden dotfiles in home directory
| 18 | 4. Set environment variables in `~/.openclaw/openclaw.json`: |
External URL reference
| 4 | metadata: {"openclaw": {"requires": {"env": ["TRAKT_CLIENT_ID", "TRAKT_CLIENT_SECRET", "TRAKT_ACCESS_TOKEN"]}, "primaryEnv": "TRAKT_ACCESS_TOKEN", "homepage": "https://trakt.tv"}} |
External URL reference
| 15 | 1. Create a Trakt application at https://trakt.tv/oauth/applications |
External URL reference
| 44 | curl -X POST https://api.trakt.tv/sync/watchlist \ |
External URL reference
| 54 | curl https://api.trakt.tv/sync/watchlist/movies \ |
External URL reference
| 62 | curl -X POST https://api.trakt.tv/sync/watchlist/remove \ |
External URL reference
| 74 | curl "https://api.trakt.tv/search/movie?query=inception" \ |
External URL reference
| 81 | curl "https://api.trakt.tv/search/show?query=breaking+bad" \ |
External URL reference
| 90 | curl https://api.trakt.tv/sync/history \ |
External URL reference
| 98 | curl -X POST https://api.trakt.tv/sync/history \ |
External URL reference
| 110 | curl https://api.trakt.tv/sync/collection/movies \ |
External URL reference
| 118 | curl -X POST https://api.trakt.tv/sync/collection \ |
External URL reference
| 130 | curl https://api.trakt.tv/sync/ratings/movies \ |
External URL reference
| 138 | curl -X POST https://api.trakt.tv/sync/ratings \ |
External URL reference
| 150 | curl https://api.trakt.tv/recommendations/movies?limit=10 \ |
External URL reference
| 158 | curl https://api.trakt.tv/movies/trending \ |
External URL reference
| 165 | curl https://api.trakt.tv/movies/popular \ |
External URL reference
| 262 | echo "https://trakt.tv/oauth/authorize?response_type=code&client_id=$CLIENT_ID&redirect_uri=$REDIRECT_URI" |
External URL reference
| 271 | RESPONSE=$(curl -s -X POST https://api.trakt.tv/oauth/token \ |
External URL reference
| 299 | curl -X POST https://api.trakt.tv/sync/watchlist \ |
External URL reference
| 314 | curl "https://api.trakt.tv/movies/trending?limit=10" \ |
External URL reference
| 326 | curl -X POST https://api.trakt.tv/sync/ratings \ |