Request movies and TV shows through Jellyseerr. Use when the user wants to add media to their Plex/Jellyfin server, search for content availability, or manage media requests.

What to consider before installing: - Functionality: The skill's code matches its description: it talks to a Jellyseerr server using a server URL + API key (stored at ~/.config/jellyseerr/config.json), can poll or receive webhooks, and queues notifications for a bot/Telegram. If that is what you want, the capability is coherent. - Review install scripts before running with sudo: install_service.sh writes a systemd unit and hardcodes SCRIPT_DIR (/home/clawd/...) and User=clawd. If you run it as-is on your machine it will likely point to the wrong path or create a service running under an unexpected user. Edit the service file (or install script) to set the correct WorkingDirectory and User for your environment, and inspect the unit before enabling it. - Network exposure: The webhook server binds 0.0.0.0:8384 by default. If you expose that port to the network, ensure firewall rules or a reverse proxy with TLS/auth are used. Prefer binding to localhost and using a reverse proxy if remote access is required. - Secrets: The Jellyseerr API key is stored locally in ~/.config/jellyseerr/config.json (the setup script sets 600 permissions). Ensure you trust the host and review scripts if you are concerned about accidental exfiltration. The code does not appear to transmit secrets elsewhere, but optional TELEGRAM_CHAT_ID or CLAWDBOT env vars may be used to route notifications. - Notifications integration: The scripts queue notifications in ~/.cache/jellyseerr/pending_notifications.json and expect an external actor (Clawdbot or send_notifications.py run in an appropriate context) to actually deliver messages. If you don't use Telegram/Clawdbot, either adjust the scripts or disable notification automation. - Minor hygiene: The crontab example uses $(pwd) which is fragile; prefer absolute paths. Also verify which user will own the service and files after installation and correct permissions as needed. If you are not comfortable editing the scripts or running systemd units created by this package, do not run the install_service/setup_webhook scripts with sudo; instead run scripts locally, inspect files, and adapt service/unit definitions to your environment.

Type: OpenClaw Skill Name: jellyseerr Version: 1.0.0 The skill is classified as suspicious due to its use of high-risk capabilities, including establishing persistence via `crontab` modification (`SKILL.md`, `scripts/auto_monitor.sh`) and creating systemd services with `sudo` (`scripts/install_service.sh`, `scripts/setup_webhook.sh`). It also opens a network port (`0.0.0.0:8384`) using `scripts/webhook_server.py` to receive incoming webhooks. While these actions are plausibly required for the stated purpose of automated media requests and notifications, they represent significant system modifications and network exposure.