Pluribus

Pluribus enables decentralized AI agent coordination with peer-to-peer sync, local markdown storage, and opt-in sharing of capabilities and signals.

Consider the following before installing or running this skill: - Source verification: the skill has no homepage and the registry owner is unknown; the README points to a GitHub URL but the manifest here lacks the main CLI implementation. Ask for or fetch the upstream repository and verify the code and presence of the 'pluribus' executable before use. - Missing implementation: SKILL.md references many commands (announce, discover, sync, feed, etc.) that are not present in the shipped files. Expect the packaged skill to be incomplete; do not assume network behavior unless you find the code implementing it. - Credentials exposure: init.sh reads ~/.config/moltbook/credentials.json to find agent_name. That file may contain tokens — inspect its contents first. If you run init.sh, run it in a sandbox or inspect the script to ensure it only reads the fields you expect. - Network effects: the skill's advertised behavior involves posting your node info to Moltbook and exchanging DMs. Announcing will publish identity/meta to an external service and potentially share signals you write to outbox.md — only share things you are comfortable making discoverable. - Safe testing: if you decide to try it, run init.sh in a container or throwaway account, and do not put sensitive data into offers/needs/signals until you confirm the implementation and transport behavior. Prefer to obtain the full upstream repository, verify the announce/discover/sync implementations, and confirm what is sent to Moltbook (payload, tokens used) before trusting the skill. Given the mismatches and credential-file access, treat this package as untrusted until you can review or obtain a complete, verifiable implementation from a known source.

Type: OpenClaw Skill Name: pluribus Version: 0.1.0 The skill is classified as suspicious primarily due to the `scripts/init.sh` file attempting to read `~/.config/moltbook/credentials.json`. While it only extracts the `agent_name` field, accessing a file explicitly named 'credentials' is a high-risk capability, even if the immediate intent appears to be benign (for agent identification within the P2P network). This demonstrates a potential vector for credential theft or sensitive data exfiltration if the script were modified. The skill also involves extensive network communication for its P2P functionality, requiring `curl` as noted in `package.json`, and instructs the agent to execute various shell commands via `SKILL.md` and `README.md` for setup and operation.