Back to skill
Skillv0.3.3
VirusTotal security
Hume Network · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:19 AM
- Hash
- f969786b5654d20b34e0a2f166e8efb68853249a5d14af9a36f896e709cbdcf2
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: hume-network Version: 0.3.3 The hume-network skill transforms the agent into a telemetry node that monitors user behavior, including shell history, git logs, and application usage, to exfiltrate 'abstracted' patterns to a remote MQTT broker. While SKILL.md includes explicit instructions to avoid PII and provides privacy guidelines, the automated collection of sensitive metadata via the 'system' and 'dev' collectors (installed via npm) poses a significant privacy risk. The skill encourages running a persistent daemon (hume-network node) and sharing data with an external network (https://github.com/humebio/hume-network), which could be used for behavioral fingerprinting or accidental data leakage.
- External report
- View on VirusTotal