plex

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible network targets are mostly legitimate Plex endpoints and there is no obvious malware or installer abuse, but the skill is internally inconsistent. It claims read-only GET-only monitoring while its instructions and references include numerous state-changing Plex operations, and the unprovided helper script is a central unverifiable component. This is better classified as a medium-risk, over-scoped Plex administration skill rather than a strictly read-only browsing skill.

Confidence: 88%Severity: 59%
Audit Metadata
Analyzed At
Sep 21, 2026, 06:15 AM
Package URL
pkg:socket/skills-sh/jmagar%2Fclaude-homelab%2Fplex%2F@c16de9bf3f7d5c4b3c70f898b14ca70f623c64fed1ca0123b847f8efb14548bf