Back to skill
Skillv1.0.2

VirusTotal security

Beehiiv · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:21 AM
Hash
35d8bcd6ba6f9ebc5872df15fdb76d4aa495ef3607f7428c4687b72f341d0ed3
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: beehiiv-integration Version: 1.0.2 The skill requires the agent to perform high-privilege operations, including a global NPM package installation (@membranehq/cli) and environment-level authentication. It directs all Beehiiv API interactions through a third-party proxy service (getmembrane.com), which centralizes credential management and data transit through an external intermediary. While these behaviors are aligned with the stated purpose of the Membrane integration, they represent significant architectural risks and a broad attack surface for an automated agent.
External report
View on VirusTotal