Lyrion Music

Steuere Lyrion Music Server (LMS) über die JSON-RPC API. Nutze diesen Skill für Wiedergabe-Steuerung (Play/Pause/Stop), Lautstärke, Playlist-Verwaltung, Player-Auswahl und Musikdatenbank-Abfragen. Erfordert LMS auf Port 9000.

Security Scan

The skill's declared purpose (control a Lyrion/Logitech Media Server over JSON-RPC on port 9000) matches its instructions and included script, but there are a few small inconsistencies and a modest operational risk because the model can invoke it autonomously and we couldn't inspect the script's runtime behavior here.

Purpose & Capability

Name/description, SKILL.md and the included script all describe controlling a Lyrion Music Server over JSON-RPC (port 9000). Nothing in the metadata or instructions requests unrelated cloud credentials, host access, or system-level privileges that would be out of scope for a local music-server control skill.

Instruction Scope

Instructions are narrowly scoped to running the bundle's script (./skills/lyrion-music/scripts/lyrion.sh) to query players, control playback, manage playlists and search the music DB. SKILL.md references an environment variable (LYRION_HOST) as configurable; the instructions do not ask for reading other host files or unrelated system state. Because a script is executed, its internal behaviour (network calls, file reads) cannot be verified from SKILL.md alone.

Install Mechanism

No install spec — lowest-risk delivery. The package includes a shell script that the SKILL.md expects to run directly; there is no remote download or archive extraction declared.

Credentials

The skill declares no required environment variables or credentials, which is proportionate for a LAN-control skill. SKILL.md mentions an optional LYRION_HOST env var (default 192.168.20.40:9000) that is not declared in the metadata — a minor mismatch but not a direct security red flag. No secrets or unrelated tokens are requested.

Persistence & Privilege

always is not set, but disable-model-invocation is also not set, so the model could autonomously invoke this skill. That means the agent could issue playback/volume/playlist commands to devices on your LAN without an explicit user prompt. This is expected for control skills but is an operational risk you should be aware of.

Assessment

This skill appears to do what it says (control a local Lyrion/Logitech Media Server). Before installing: (1) review the scripts/lyrion.sh contents to confirm it only talks to your LMS host and does not call external hosts or read unrelated files; (2) set LYRION_HOST explicitly if you want to limit which device it can control; (3) if you do not want the agent to autonomously control playback, ensure the skill is marked user-invocable only or disable model invocation; and (4) run the skill in a controlled environment (or inspect the script) if you have sensitive devices on the same network.

Lyrion Music Server Skill

Steuerung des Lyrion Music Servers (ehemals Logitech Media Server) über JSON-RPC API.

Konfiguration

Standard-Host: 192.168.20.40:9000 (konfigurierbar über LYRION_HOST Umgebungsvariable)

Verwendung

Nutze das Skript scripts/lyrion.sh für alle Operationen:

./skills/lyrion-music/scripts/lyrion.sh <befehl> [parameter]

Befehle

Player-Verwaltung:

• players - Liste aller Player
• status [player_id] - Aktueller Status eines Players

Wiedergabe-Steuerung:

• play [player_id] - Wiedergabe starten
• pause [player_id] - Pause umschalten
• stop [player_id] - Stoppen
• power [player_id] [on|off] - Player ein/ausschalten

Lautstärke:

• volume [player_id] [0-100|+|-] - Lautstärke setzen/ändern
• mute [player_id] - Stummschalten

Playlist:

• playlist [player_id] - Aktuelle Playlist anzeigen
• clear [player_id] - Playlist leeren
• add [player_id] <url/pfad> - Titel zur Playlist hinzufügen
• playtrack [player_id] <index> - Bestimmten Titel abspielen

Datenbank:

• artists - Künstler auflisten
• albums [artist_id] - Alben auflisten
• songs [album_id] - Titel auflisten
• search <suchbegriff> - Globale Suche

API Referenz

Siehe references/api.md für vollständige API-Dokumentation.

Beispiele

# Alle Player anzeigen
./skills/lyrion-music/scripts/lyrion.sh players

# Wiedergabe im Wohnzimmer starten (Player ID erforderlich)
./skills/lyrion-music/scripts/lyrion.sh play aa:bb:cc:dd:ee:ff

# Lautstärke auf 50% setzen
./skills/lyrion-music/scripts/lyrion.sh volume aa:bb:cc:dd:ee:ff 50

# Playlist leeren und Album abspielen
./skills/lyrion-music/scripts/lyrion.sh clear aa:bb:cc:dd:ee:ff
./skills/lyrion-music/scripts/lyrion.sh add aa:bb:cc:dd:ee:ff "db:album.id=123"
./skills/lyrion-music/scripts/lyrion.sh play aa:bb:cc:dd:ee:ff