← Back to Skills Marketplace
maxtechera

Nexus Cli

by Max Techera · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
309
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install nexus-cli
Description
Manage a Jellyfin/Plex + *Arr media server stack — check status, add content, monitor downloads, diagnose issues, restart services. Use this when the user as...
Usage Guidance
Do not install blindly. The package files implement 'Admirarr' (a full media-stack CLI) even though the registry entry labels it differently and claims it's instruction-only. Review the following before proceeding: 1) inspect install.sh and any remote install URL (the README recommends curl | sh); do not run remote install scripts you don't inspect. 2) examine internal/keys and any docker-exec usage — the tool auto-discovers API keys from containers, which requires Docker/container access and can expose secrets. 3) be cautious with 'admirarr doctor --fix' because it will run repairs (restarts, file operations) and may dispatch the full diagnostic context to other agents; only allow fixes when you trust the agent and have backups. 4) prefer running the CLI in a controlled environment (non-production VM or isolated container) first and confirm exactly what privileges it needs (Docker socket, access to media paths). If you expect a lightweight 'instruction-only' skill, treat this as suspicious because it bundles an executable project and installer that were not declared in the registry. If you want to proceed, verify source provenance (GitHub Releases or an official maintainer), review the installer script, and run it with minimal privileges.
Capability Analysis
Type: OpenClaw Skill Name: nexus-cli Version: 1.0.0 The Admirarr skill bundle is a comprehensive Go-based CLI tool designed to manage self-hosted media server stacks (Jellyfin, Plex, and the *Arr suite). It performs high-privilege operations such as auto-discovering API keys by reading configuration files inside Docker containers (internal/keys/keys.go) and generating/executing Docker Compose stacks (internal/migrate/migrate.go). It also features an AI-integrated diagnostic engine (internal/doctor/fix.go) that can dispatch troubleshooting tasks to other installed AI agents. While these capabilities are powerful, they are strictly aligned with the tool's documented purpose of stack management and diagnostics. No evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found.
Capability Assessment
Purpose & Capability
Metadata at the top says "Nexus Cli" but the included SKILL.md, README, and all source files implement "Admirarr" — a full-featured media stack CLI. The package claims to be instruction-only with no install spec, yet the repository contains a complete Go project, an install.sh, and distribution URLs referenced in README. This mismatch (name vs contents, instruction-only claim vs shipped source and installer) is incoherent and worth flagging.
Instruction Scope
SKILL.md instructs agents to call the admirarr CLI for status, diagnostics and an AI-powered 'doctor --fix' flow. The codebase implements actions that: query service APIs, run docker/docker-compose commands via exec, read container configs (auto-discover API keys), restart containers, create directories, and optionally delete downloaded files (--delete-files). The 'doctor --fix' step explicitly dispatches remaining issues to detected AI agents with 'full diagnostic context' — this can expose sensitive system state to other agents or systems. These instructions go beyond simple read-only status checks and include potentially destructive or highly sensitive operations.
Install Mechanism
Registry claims no install spec (instruction-only), but the repo contains an install.sh and README suggests a one-liner curl | sh (get.admirarr.dev) and GitHub Releases/Homebrew/etc. There is no install spec recorded in the registry metadata, so how the binary will be installed by an agent is unclear. The presence of an installer URL in docs (curl | sh) is a higher-risk install mechanism if used — the registry should have explicitly declared the install source. This inconsistency increases risk because an agent or user following the README could fetch/execute remote code.
Credentials
The skill declares no required env vars, but the tool auto-discovers and stores service URLs and API keys in ~/.config/admirarr/config.yaml and includes code that reads container configs (docker exec) to find API keys. That behavior requires access to Docker/containers and to potentially sensitive secrets (service API keys). Those capabilities are coherent with a media-stack manager but are not reflected in the declared requirements — the skill asks for access to data it does not explicitly declare, which is a proportionality and transparency concern.
Persistence & Privilege
always:false (good). The repo includes .claude agent definitions and an auto-rebuild hook that rebuilds the binary on .go file edits (noted in CLAUDE.md). While the skill doesn't request forced permanent inclusion, the presence of agent hooks and local build scripts means an installed agent could rebuild/replace the binary if it has write access to the repo/output path. This is not itself a disqualifier, but combined with the other concerns it widens the blast radius.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install nexus-cli
  3. After installation, invoke the skill by name or use /nexus-cli
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of admirarr — a unified CLI for managing a Jellyfin/Plex + *Arr media server stack. - Manage 20+ services in one binary with JSON outputs for all commands. - Monitor overall system status, disk, Docker containers, and diagnose/fix issues. - View and manage movie/TV libraries, download queue, active torrents, and history. - Search for content, add movies/shows interactively, and control indexers. - Trigger media scans, restart services, review logs, and migrate stacks. - Deep agent integration for diagnostics and automated fixes.
Metadata
Slug nexus-cli
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Nexus Cli?

Manage a Jellyfin/Plex + *Arr media server stack — check status, add content, monitor downloads, diagnose issues, restart services. Use this when the user as... It is an AI Agent Skill for Claude Code / OpenClaw, with 309 downloads so far.

How do I install Nexus Cli?

Run "/install nexus-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Nexus Cli free?

Yes, Nexus Cli is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Nexus Cli support?

Nexus Cli is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Nexus Cli?

It is built and maintained by Max Techera (@maxtechera); the current version is v1.0.0.

💬 Comments