ClawHub

Tautullu

v1.0.0

Monitor Plex activity and stats via Tautulli API. Check who's watching, view history, get library stats, and see server info.

⭐ 3· 2k·3 current·3 all-time
by@rjmurillo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested resources: curl and jq are needed to call the Tautulli API, and the only env vars requested are TAUTULLI_URL and TAUTULLI_API_KEY which are exactly what Tautulli requires.
✓
Instruction Scope
SKILL.md and the scripts only call the Tautulli API endpoints (via $TAUTULLI_URL) and parse JSON with jq. There are no instructions to read unrelated files, exfiltrate data to third parties, or access other system credentials.
ℹ
Install Mechanism
There is no install spec (instruction-only), which is low risk; included scripts are simple shell callers. Minor provenance note: registry metadata lists source/homepage as unknown while README suggests a GitHub repo — you may want to verify the upstream repository matches the packaged files before trusting them.
✓
Credentials
Only TAUTULLI_URL and TAUTULLI_API_KEY are required. This is proportional to the stated functionality (calling the Tautulli API). The API key is sensitive but its use is justified by the skill's purpose.
✓
Persistence & Privilege
always is false and the skill does not request system-wide changes or modify other skills. It does not persist additional credentials or require elevated privileges.
Assessment
This skill appears to do what it says: simple curl requests to your Tautulli instance. Before installing: (1) verify the skill package matches the upstream GitHub repo referenced in the README (source/homepage in registry is missing), (2) ensure TAUTULLI_URL points to a trusted/local network address (do not expose a public Tautulli URL with this key), (3) keep TAUTULLI_API_KEY secret and rotate it if compromised, and (4) if you do not want the agent to call the skill autonomously, disable autonomous invocation for the skill in your agent settings. If you are unsure, review the included scripts (they are short and readable) before enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f1srzb04ea483a1yzpqx63n80axqd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
Binscurl, jq
EnvTAUTULLI_URL, TAUTULLI_API_KEY

Comments