PlexMedia2HTML Export

Exports Plex Media Library (Movies & TV Shows) as static HTML pages. Features: Multilingual (EN/DE), token obfuscation (machine-bound), genre filter, detail...

This package appears to do what it says: export a Plex library to static HTML and locally store an obfuscated Plex token bound to the machine. Before installing, verify these points: 1) Source trust: the skill's source/homepage is unknown—review the export.py file yourself or install in an isolated environment. 2) Token security: the code uses XOR+Base64 with a machine-derived key (obfuscation, not strong encryption). If you require stronger protection, use an OS keyring or avoid storing the token. 3) Installer wrapper: SKILL.md mentions a 'plex-export' wrapper/CLI but the manifest lacks a separate wrapper file—confirm how ClawHub will expose the CLI or run export.py directly. 4) SSL: avoid using --insecure unless you trust the network and Plex server (it disables certificate verification). 5) Permissions: verify config file location and that CONFIG_FILE is chmod 600 as claimed. If any of these points are unacceptable, test the script manually, or require modifications (e.g., replace obfuscation with keyring storage) before using.

Type: OpenClaw Skill Name: plexmedia2html-export Version: 1.3.1 The skill is a legitimate tool for exporting Plex Media Library metadata into static HTML pages. It handles sensitive Plex tokens by obfuscating them using a machine-specific key derived from '/etc/machine-id' and enforces strict file permissions (chmod 600) on its configuration file (export.py). All network activity is directed to the user-provided Plex server URL, and the code follows the behavior described in the documentation without any signs of data exfiltration or unauthorized execution.