Harvest

• Analyzed: May 14, 2026, 6:33 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0a49e6c1866f93adba59bae017e31942ed794dc6c4db6ea46e70270568b277a5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate integration for Harvest time tracking software using the Membrane CLI. It contains standard instructions for the OpenClaw agent to manage Harvest entities (projects, tasks, users) through authenticated actions and proxy requests via the @membranehq/cli tool. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found in SKILL.md or _meta.json.