← 返回 Skills 市场
117
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install plex-control
功能描述
A standalone command-line skill to interact with and manage Plex Media Server directly, featuring playback controls and secured temporary caching.
安全使用建议
This skill appears to implement a legitimate Plex CLI and only needs your Plex URL and token to function, but there are a few concerns to check before installing:
- Confirm the source: the package has no homepage and comes from an unknown owner. If you don't trust the author, don't install.
- Resolve the metadata mismatch: the top-level registry summary lists no required env vars/binaries, but SKILL.md and metadata.json require PLEX_URL, PLEX_TOKEN, 'uv', and 'python3'. Make sure you (or the platform) provide these correctly; otherwise the agent may fail or attempt unexpected actions.
- 'uv' is an uncommon runner; ensure you know what 'uv' will do on your system or provide an alternate invocation (python3 scripts/plex_cli.py) if you prefer.
- Treat PLEX_TOKEN as a sensitive secret. Only provide it if you trust the skill and the environment where it's run.
- Consider privacy: the skill returns live session info (usernames, player addresses) to stdout and caches media titles/actors/genres in the system temp directory. If that is acceptable for your environment, proceed; otherwise do not install.
If you want higher assurance, ask the publisher for a known homepage or repo, or run the included script locally in a controlled environment first to verify behavior.
功能分析
Type: OpenClaw Skill
Name: plex-control
Version: 1.1.0
The Plex Standalone Skill is a legitimate tool for managing a Plex Media Server. It uses the standard 'plexapi' library and handles sensitive credentials (PLEX_TOKEN) via environment variables as expected for OpenClaw agents. The caching mechanism in 'scripts/plex_cli.py' uses the system's temporary directory to store non-sensitive media metadata for performance, and no evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The script and SKILL.md claim the skill requires PLEX_URL and PLEX_TOKEN and the binaries 'uv' and 'python3' (and the Python dependency plexapi). Those requirements are coherent with a Plex-control CLI. However, the registry-level info provided at the top of the package (the 'Requirements' summary) lists no required env vars or binaries — a direct inconsistency between how the skill advertises itself at the package level and the internal metadata.json / SKILL.md. This mismatch is unexplained and could cause confusion or accidental failure when installing or running the skill.
Instruction Scope
The SKILL.md instructs the agent to run the included script via 'uv run scripts/plex_cli.py' and to inject PLEX_URL and PLEX_TOKEN into the environment. The script only contacts the specified Plex server and writes a JSON cache to the OS temp dir; it does not attempt to read local dotfiles or other system credentials. It does, however, fetch and return potentially sensitive live session data (usernames, playback state, client addresses) to stdout — this is expected for a Plex management tool but is privacy-sensitive and should be considered by the user.
Install Mechanism
There is no formal install spec (instruction-only), which is low risk, but the SKILL.md and metadata.json expect dependencies to be handled automatically via the 'uv' runner. 'uv' is an uncommon runtime tool and is listed as a required binary inside metadata.json but was not declared in the top-level package requirements. Because there is no explicit, reproducible install step, running the skill may fail or cause the agent to try to install/run tools it doesn't have. No network download URLs or extract/install steps are present.
Credentials
The only sensitive environment variables accessed are PLEX_URL and PLEX_TOKEN, which are proportionate and necessary for connecting to a Plex server. The script reads only those env vars. The problem is that the top-level provided manifest initially listed no required env vars while internal files require them — a packaging inconsistency the user should resolve before granting credentials.
Persistence & Privilege
The skill does not request permanent or privileged presence: 'always' is false, it does not modify other skills or system-wide settings, and it writes only a transient cache to the OS temp directory. It does not persist tokens to disk. No elevated privileges or persistent agent modifications are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install plex-control - 安装完成后，直接呼叫该 Skill 的名称或使用
/plex-control触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
- Added formal registry metadata file (metadata.json) specifying environment variables and binary dependencies.
- Updated documentation to clarify configuration, security, and cache behavior.
- Now declares requirements (environment variables, binaries) explicitly in metadata.
- Emphasized that only non-sensitive library metadata is cached, and session/playback info is never stored.
- No code changes to functionality; this is a documentation and metadata update.
v1.0.1
Suspicious flag misunderstanding correction
v1.0.0
Initial standalone CLI skill release for Plex:
- Added standalone Python CLI (`scripts/plex_cli.py`) to interact with Plex Media Server directly.
- Introduced local media cache (`media_cache.json`) for instant, offline search functionality.
- Provided commands for server info, libraries, searching media, viewing sessions, on-deck content, and playback controls (play, pause, resume, stop) on specified clients.
- Streamlined usage instructions and requirements in updated documentation; no MCP server required.
- All script actions respond with structured JSON output for easy parsing.
元数据
常见问题
Plex Media Remote 是什么？
A standalone command-line skill to interact with and manage Plex Media Server directly, featuring playback controls and secured temporary caching. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 117 次。
如何安装 Plex Media Remote？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install plex-control」即可一键安装，无需额外配置。
Plex Media Remote 是免费的吗？
是的，Plex Media Remote 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Plex Media Remote 支持哪些平台？
Plex Media Remote 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Plex Media Remote？
由 Yahya（@ymgenc）开发并维护，当前版本 v1.1.0。
推荐 Skills