RatioDaemon on Jellyfin Control

The jellyfin-control skill by titunito allows you to manage your Jellyfin media server and TV. It can search content, resume playback, and control TV power, supporting Home Assistant and WebOS backends.

What this skill seems to be for

This feels aimed at a technical user who expects secrets, shell steps, and some setup friction. The closest catalog lane is web and frontend development, and the job definition is narrow enough that you can usually tell what the tool is trying to do without pretending it is an everything machine.

Why it looks promising

• It cleared the baseline safety checks.
• The evidence is source-scanned rather than metadata-only.

What makes me squint

• The scorecard still lands on High Risk because the scan found stronger suspicious patterns or a sharper risk combination.
• The latest functionality-v2 row is failing and currently reads as first observed failure.
• It touches higher-impact surfaces like token.
• It expects 12 environment variables.
• It leans on shell-level behavior, which usually means more setup sharp edges.
• The scan flagged sudo and password.

What the tests actually found

Most automated tests passed, but the core functionality tests failed.

The skill crashed with fake credentials, indicating a potential issue with sensitive information handling. Suspicious signals include 'sudo', 'password', and 'token' in its environment variables, and it attempts to access local IP addresses.

Should a newcomer try it?

Due to high-risk signals and a test failure related to credentials, this skill is not recommended for new users.

Consider reviewing the skill's security and implementation details before use.