← Back to Skills Marketplace
PaleBlueDot CLI
by
derekdong-star
· GitHub ↗
· v1.0.1
· MIT-0
113
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install pbd-cli
Description
Command-line tool for PaleBlueDot AI platform supporting login, API token management, usage and balance queries, and browsing available AI models.
Usage Guidance
This skill appears to do what it claims, but exercise caution before installing. Do not blindly run the suggested curl | bash installer: inspect the install.sh contents and verify the GitHub repository and release artefacts (checksums/signatures) yourself. Prefer downloading an audited release or using a package manager if available. Be aware the CLI stores session cookies/API tokens locally (check the config path and file permissions). If you must use manual login, avoid pasting sensitive cookies into untrusted environments. If you want lower risk, ask the vendor for signed releases or a package that can be inspected before execution, or run the install inside a disposable VM/container.
Capability Analysis
Type: OpenClaw Skill
Name: pbd-cli
Version: 1.0.1
The skill bundle describes a CLI tool for managing AI platform credentials, including session cookies and API tokens. A significant security concern is the 'One-click Install' instruction in SKILL.md, which directs the agent or user to execute a remote script via 'curl | bash' from a GitHub repository (github.com/PaleBlueDot-AI-Open/pbd-cli). This pattern is a high-risk behavior that facilitates potential supply chain attacks and remote code execution. While the tool's functionality is consistent with its stated purpose, the combination of sensitive credential handling and unverified remote script execution warrants a suspicious classification.
Capability Assessment
Purpose & Capability
The SKILL.md describes a CLI for authentication, token management, usage queries, and model browsing — that matches the stated purpose. However, the SKILL.md metadata lists a required binary (pbd-cli) while the registry metadata reported no required binaries; this mismatch suggests the registry record and runtime instructions are not fully synchronized.
Instruction Scope
The instructions stay within the CLI's domain: they describe browser-based OAuth callback, a local HTTP server for the callback, manual cookie entry, token and usage commands, and local config storage. The skill does not instruct reading unrelated system files or grabbing arbitrary environment variables. The manual-login flow does ask the user to paste a session cookie (user-supplied data).
Install Mechanism
Although there is no formal install spec in the registry, the SKILL.md includes a One-click Install that pipes a script from raw.githubusercontent.com into bash (curl ... | bash) and installs to /usr/local/bin. Download-and-execute from a remote script is high-risk: while GitHub raw is a common host, piping to bash executes remote code without a local inspection step and can modify system paths. The SKILL.md does not show the install script contents or provide checksums or signed releases.
Credentials
The skill declares no required environment variables or primary credential, which aligns with a client CLI that performs interactive login. It will, however, store session tokens/config locally and manages API tokens — users should expect secrets (session cookies/API keys) to be written to local config. No unrelated credentials are requested.
Persistence & Privilege
always:false and normal autonomous invocation are set (no elevated platform privilege). The install instructions propose placing a binary in /usr/local/bin, which is a persistent, system-wide location and may require elevated permissions; the skill does not ask to modify other skills or system configs beyond installing its binary.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pbd-cli - After installation, invoke the skill by name or use
/pbd-cli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Added installation instructions with a one-click script for Linux/macOS.
- No changes to commands or functionality; documentation update only.
v1.0.0
Initial release of pbd-cli: Command-line tool for the PaleBlueDot AI Platform.
- Supports authentication via browser-based OAuth or manual session cookie.
- API token management: create, view, delete, and retrieve token keys.
- Query account usage, balance, and subscription status.
- List and browse available AI models for the account.
- Includes detailed error handling, help commands, and secure local config storage.
Metadata
Frequently Asked Questions
What is PaleBlueDot CLI?
Command-line tool for PaleBlueDot AI platform supporting login, API token management, usage and balance queries, and browsing available AI models. It is an AI Agent Skill for Claude Code / OpenClaw, with 113 downloads so far.
How do I install PaleBlueDot CLI?
Run "/install pbd-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is PaleBlueDot CLI free?
Yes, PaleBlueDot CLI is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does PaleBlueDot CLI support?
PaleBlueDot CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created PaleBlueDot CLI?
It is built and maintained by derekdong-star (@derekdong-star); the current version is v1.0.1.
More Skills