Back to skill
Skillv5.1.2
VirusTotal security
Pubblue · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 4:29 AM
- Hash
- a45fe0d02b897ae47b620dcfa0e0685fbc1d4e4ba912b32aa53366da6b8e858a
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: pubblue Version: 5.1.2 The skill facilitates publishing agent output and establishing live P2P sessions via the pubblue CLI. It involves high-risk operations including global NPM package installation (pubblue@latest) and the execution of a background daemon (pubblue start) for P2P communication. While these capabilities are aligned with the stated purpose of real-time visualization, the requirement for persistent network connections and broad shell permissions (Bash, Read, Write) constitutes a significant attack surface without clear evidence of malicious intent.
- External report
- View on VirusTotal