Nexus Cli

Manage a Jellyfin/Plex + *Arr media server stack — check status, add content, monitor downloads, diagnose issues, restart services. Use this when the user as...

Do not install blindly. The package files implement 'Admirarr' (a full media-stack CLI) even though the registry entry labels it differently and claims it's instruction-only. Review the following before proceeding: 1) inspect install.sh and any remote install URL (the README recommends curl | sh); do not run remote install scripts you don't inspect. 2) examine internal/keys and any docker-exec usage — the tool auto-discovers API keys from containers, which requires Docker/container access and can expose secrets. 3) be cautious with 'admirarr doctor --fix' because it will run repairs (restarts, file operations) and may dispatch the full diagnostic context to other agents; only allow fixes when you trust the agent and have backups. 4) prefer running the CLI in a controlled environment (non-production VM or isolated container) first and confirm exactly what privileges it needs (Docker socket, access to media paths). If you expect a lightweight 'instruction-only' skill, treat this as suspicious because it bundles an executable project and installer that were not declared in the registry. If you want to proceed, verify source provenance (GitHub Releases or an official maintainer), review the installer script, and run it with minimal privileges.

Type: OpenClaw Skill Name: nexus-cli Version: 1.0.0 The Admirarr skill bundle is a comprehensive Go-based CLI tool designed to manage self-hosted media server stacks (Jellyfin, Plex, and the *Arr suite). It performs high-privilege operations such as auto-discovering API keys by reading configuration files inside Docker containers (internal/keys/keys.go) and generating/executing Docker Compose stacks (internal/migrate/migrate.go). It also features an AI-integrated diagnostic engine (internal/doctor/fix.go) that can dispatch troubleshooting tasks to other installed AI agents. While these capabilities are powerful, they are strictly aligned with the tool's documented purpose of stack management and diagnostics. No evidence of data exfiltration, unauthorized persistence, or malicious prompt injection was found.