Back to skill
Skillv1.0.2

VirusTotal security

Appwrite · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:20 AM
Hash
bb8eeaa1544a2e4b598be8be7eb54ab890306fafd65b51519296b15f948377b8
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: appwrite Version: 1.0.2 The skill bundle (SKILL.md) instructs the AI agent to perform high-risk operations, including the global installation of a third-party CLI tool (`npm install -g @membranehq/cli`) and the execution of various shell commands for authentication and resource management. While these actions are aligned with the stated purpose of integrating Appwrite via the Membrane platform, the reliance on shell execution and network access for authentication constitutes a significant attack surface for command injection or unauthorized access if user inputs are not properly sanitized by the agent.
External report
View on VirusTotal