Reward Sciences

Reward Sciences integration. Manage Persons, Organizations, Deals, Leads, Projects, Activities and more. Use when the user wants to interact with Reward Scie...

This skill appears coherent and does what it says: it relies on the Membrane CLI to broker access to Reward Sciences. Before installing/using it, consider: 1) Vet the @membranehq/cli package and its publisher (npm page, repo, recent activity, reviews) before installing globally; use the provided npx examples if you prefer not to install globally. 2) Understand that you are delegating credential management to Membrane — review their privacy/security practices and terms. 3) In headless environments you'll need to perform the OAuth browser step (obtain and paste the code) — avoid pasting codes from untrusted sources. 4) Because the skill requires network access and a Membrane account, ensure your environment/network policies permit that outbound access. If you need more assurance, provide the package name and repository URL and verify its source code before installing.

Type: OpenClaw Skill Name: reward-sciences Version: 1.0.3 The skill bundle (SKILL.md) instructs the agent to perform high-risk system operations, including installing a global NPM package (@membranehq/cli) and executing shell commands to manage authentication and data via the Membrane platform. While these actions are aligned with the stated purpose of integrating with Reward Sciences, the requirement for global package installation and the execution of external binaries (membrane CLI) without local source code visibility constitutes a significant risk profile and potential attack surface.