Back to skill
Skillv1.0.0

VirusTotal security

Frinkiac - Search, browse, and generate memes from The Simpsons, Futurama, Rick and Morty, and 30 Rock scenes · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewMay 1, 2026, 3:23 AM
Hash
371d73ee1257925975761943ca5ec644a5d84eeed0d23520677c9b272b131a2d
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: frinkiac Version: 1.0.0 The skill bundle is classified as suspicious due to its use of `npx` to download and execute a remote npm package (`@ryantenney/frinkiac-mcp`) as part of its MCP server setup, as defined in `SKILL.md`. While this action is ostensibly for the skill's stated purpose, it represents a significant supply chain risk, allowing arbitrary code execution from an external source. The `-y` flag further enables non-interactive installation and execution, increasing the risk without explicit user confirmation.
External report
View on VirusTotal