Back to skill
Skillv1.0.3
VirusTotal security
Rillet · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:25 AM
- Hash
- c7b97e079aea0da02dcec050496d3b9b6d3da87cc6bfc9caa3c9118875c768fd
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: rillet Version: 1.0.3 The skill instructions in SKILL.md require the agent to perform high-risk system operations, specifically a global installation of the '@membranehq/cli' npm package and execution of shell commands for authentication. There is also a significant discrepancy in the documentation: the text describes Rillet as a social media marketing tool, whereas the actual service and the listed actions (e.g., 'List Invoices', 'List Bills') pertain to accounting and finance. While these issues likely stem from a template error rather than malice, the combination of global software installation and inaccurate functional descriptions warrants a suspicious classification.
- External report
- View on VirusTotal