Back to skill
Skillv1.0.1

VirusTotal security

Firecrawl · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 22, 2026, 4:21 PM
Hash
fdf90f5c94f9c4b930bbc00f0929de547485c4eaed24426ffca1f0b11f1f201c
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: firecrawl-integration Version: 1.0.1 The skill bundle requires the agent to perform high-risk operations, including global NPM package installation (`npm install -g @membranehq/cli`) and the execution of dynamically generated actions via the Membrane platform. While these capabilities are aligned with the stated goal of Firecrawl integration, the instructions in `SKILL.md` to install external software and run arbitrary actions created via natural language (`membrane action create`) introduce a significant attack surface and dependency on a third-party service's integrity without explicit malicious intent.
External report
View on VirusTotal