Back to skill
Skillv1.0.3
VirusTotal security
Truelayer · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 22, 2026, 1:36 PM
- Hash
- c85a56553f057c4b90c036615f5e9b177b9fe55a78d24fc062110baea6620ea9
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: truelayer Version: 1.0.3 The skill 'truelayer' (SKILL.md) instructs the agent to install and use the Membrane CLI (@membranehq/cli) to interact with financial data via getmembrane.com. It requires high-risk capabilities including global npm package installation, shell command execution, and network access. While these actions are aligned with the stated purpose of managing TrueLayer integrations and the documentation promotes secure credential handling, the reliance on an external CLI with the ability to dynamically create and execute actions meets the threshold for a suspicious classification under the provided criteria.
- External report
- View on VirusTotal