Back to skill
Skillv1.0.0

VirusTotal security

storyagent_linkedin · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:38 AM
Hash
361f1b8636dd96c11a5596f330e7734dcc0c130d9889660bc45bec6eb4a5a8d9
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: unipile-linkedin Version: 1.0.0 The skill is designed to interact with LinkedIn via the Unipile API, as stated in `SKILL.md` and `README.md`. The core script, `scripts/linkedin.mjs`, uses the `unipile-node-sdk` to perform all LinkedIn operations and retrieves API credentials (`UNIPILE_DSN`, `UNIPILE_ACCESS_TOKEN`) from environment variables, which is standard practice. There is no evidence of prompt injection, unauthorized file system access, arbitrary command execution, or data exfiltration to unapproved endpoints. The `resources/last_50_posts.json` file contains only public sample data. All observed behaviors are aligned with the stated purpose.
External report
View on VirusTotal