Back to skill
Skillv1.0.2
VirusTotal security
Beehiiv · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewApr 30, 2026, 6:21 AM
- Hash
- 35d8bcd6ba6f9ebc5872df15fdb76d4aa495ef3607f7428c4687b72f341d0ed3
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: beehiiv-integration Version: 1.0.2 The skill requires the agent to perform high-privilege operations, including a global NPM package installation (@membranehq/cli) and environment-level authentication. It directs all Beehiiv API interactions through a third-party proxy service (getmembrane.com), which centralizes credential management and data transit through an external intermediary. While these behaviors are aligned with the stated purpose of the Membrane integration, they represent significant architectural risks and a broad attack surface for an automated agent.
- External report
- View on VirusTotal
