Back to skill
Skillv1.0.2
VirusTotal security
Checkvist · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:54 AM
- Hash
- 071d008749df35347f9fd9a2459b16c87cb6279269cae4090e0cbafd6791967d
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: checkvist Version: 1.0.2 The skill 'checkvist' (v1.0.2) instructs the AI agent to perform high-risk operations including global software installation ('npm install -g @membranehq/cli') and shell command execution for authentication and API interaction in 'SKILL.md'. While these capabilities are plausibly required for the stated purpose of integrating with the Checkvist task management service via the Membrane platform, the requirement for system-wide changes and broad shell/network access constitutes a significant attack surface without built-in constraints. No evidence of intentional malice or data exfiltration was identified.
- External report
- View on VirusTotal