plex
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts using
uv runto perform authentication and library queries. These scripts are statically defined within the skill and are necessary for its stated purpose of interacting with the Plex API. - [EXTERNAL_DOWNLOADS]: Communicates with the official Plex infrastructure (
plex.tv) to perform PIN-based authentication and references the well-knownpython-plexapirepository for library documentation. - [CREDENTIALS_UNSAFE]: Manages sensitive authentication tokens and server URLs using
.envand local JSON files. It incorporates security best practices by explicitly instructing the agent to set restrictive file permissions (chmod 600) on files containing authentication data.
Audit Metadata