PLEX-CTL

Command-line tool for searching, playing, and controlling Plex Media Server and clients via the Plex API on your local network.

This package looks coherent with its stated purpose. Before installing, consider: (1) The tool requires you to supply your Plex token and will store it in ~/.plexctl/config.json — treat that file as sensitive. (2) The code may perform local network calls to your Plex server and (as a fallback) may contact Plex cloud services for MyPlex discovery; if you want strictly local-only operation, disable cloud discovery or avoid using cloud fallback. (3) The included verify.sh runs git commands and prints git remote info — review it before running to avoid revealing repository metadata. (4) Install plexapi in a Python virtual environment (pip install -r requirements.txt) and inspect plexctl.py if you want to be certain of behavior. Overall, there are no disproportionate credential or network requests and no other obvious red flags.

Type: OpenClaw Skill Name: plex-ctl Version: 1.0.0 The OpenClaw AgentSkills bundle for 'plexctl' is benign. The code (`plexctl.py`) is a straightforward CLI wrapper around the `plexapi` library, designed to control a user's local Plex Media Server. It stores configuration (Plex URL and token) locally in `~/.plexctl/config.json` and connects directly to the specified Plex server. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`, `eval`), persistence mechanisms, or obfuscation. The `SKILL.md` and `README.md` provide clear, well-defined instructions for the agent and user, explicitly stating local-only operation and no external data sharing. The use of `argparse` in `plexctl.py` mitigates direct shell injection risks into the Python script itself, assuming the agent correctly passes user input as quoted arguments.