Remotego

• Analyzed: Mar 30, 2026, 3:26 AM
• Findings: 1
• Version: 1.1.0
• Hash: 91b002419875cdeea68728367a9ecb3573b3c912fca1307bb725c5472e0300f1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The remotego skill provides a mechanism to expose local CLI tools, including shells like bash or python, to the public internet via a tunnel (localhost.run) and a web-based terminal. While documented as a collaboration tool, this functionality is functionally equivalent to a reverse shell, providing a high-risk path for remote system access and execution if the AI agent is manipulated. It is classified as suspicious rather than malicious because the behavior is transparently documented as a utility rather than being hidden or intentionally deceptive. (Files: SKILL.md, @remotego/remotego)