Back to skill
Skillv1.0.3
VirusTotal security
15Five · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 28, 2026, 5:24 AM
- Hash
- 57b6d0adec13a211b5a43a7b5a102e60ca58b81fa519052c352273f0d526126c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: 15five Version: 1.0.3 The skill provides an integration for 15Five via the Membrane CLI, but it requires high-risk operations including global installation of an NPM package (@membranehq/cli) and the execution of shell commands for authentication and action management. While these behaviors are aligned with the stated purpose of the skill, the reliance on external CLI execution and the ability to dynamically create and run actions via 'membrane action create' represent significant security risks in an agentic environment. No evidence of intentional malice or data exfiltration was found in SKILL.md or _meta.json.
- External report
- View on VirusTotal