Back to skill
Skillv1.0.3
VirusTotal security
Reward Sciences · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 29, 2026, 6:57 AM
- Hash
- da4632d614a4b4f7ddca3d9e6c506aa732e26422ee309153351dfa4f277f64ce
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: reward-sciences Version: 1.0.3 The skill bundle (SKILL.md) instructs the agent to perform high-risk system operations, including installing a global NPM package (@membranehq/cli) and executing shell commands to manage authentication and data via the Membrane platform. While these actions are aligned with the stated purpose of integrating with Reward Sciences, the requirement for global package installation and the execution of external binaries (membrane CLI) without local source code visibility constitutes a significant risk profile and potential attack surface.
- External report
- View on VirusTotal