Back to skill
Skillv1.0.3
VirusTotal security
Geoapify · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 22, 2026, 1:21 PM
- Hash
- 74dd6f07d65191568de84a6cff1af68f32b837811134d31b5970de60ed353f2d
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: geoapify Version: 1.0.3 The skill bundle instructs the AI agent to perform high-risk operations, including global installation of a third-party CLI tool (`npm install -g @membranehq/cli`) and executing shell commands for authentication and API interaction. While these actions are aligned with the stated purpose of using the Membrane platform for Geoapify integration, the requirement for broad shell and network access, along with the ability to dynamically create and run actions, constitutes a significant attack surface without explicit malicious intent identified in SKILL.md.
- External report
- View on VirusTotal