ClawHub

Okx Audit Log

v2.2.7

Use this skill when the user asks to export audit logs, find audit log location, view command history, 导出日志, 查看日志, 日志路径, 操作记录, 调用记录, 命令历史. Do NOT use for wal...

⭐ 0· 228·0 current·0 all-time
by@ok-james-01
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
CryptoRequires wallet
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name, description, and runtime instructions all align: the skill's sole purpose is to inform users about the audit log path/format. It requests no binaries, env vars, or installs that would be unrelated to this task. The mention of $ONCHAINOS_HOME is reasonable as an alternate path variable and is optional.
✓
Instruction Scope
SKILL.md only instructs the agent to report the log file path, file format, fields, and rotation policy, and explicitly forbids reading or displaying the file contents. It does not direct the agent to read local files, access credentials, or transmit data externally.
✓
Install Mechanism
No install spec and no code files — instruction-only. This minimizes disk writes and executable installs and is appropriate for a documentation-style skill.
✓
Credentials
The skill requires no environment variables or credentials. It references an optional $ONCHAINOS_HOME variable for path selection, which is proportionate to the stated purpose and not required.
✓
Persistence & Privilege
always is false, no elevated persistence or cross-skill configuration is requested. The skill does not request autonomous privileges beyond normal model invocation.
Assessment
This is a low-risk, instruction-only skill that only describes the audit log path (~/.onchainos/audit.jsonl or $ONCHAINOS_HOME/audit.jsonl) and its format — it does not ask for credentials or to read files. Before installing, verify the skill's provenance (author/homepage) if you require an official OKX tool; avoid instructing the agent to display or upload the actual log file (the SKILL explicitly forbids that). If future versions add an install script, require environment variables, or include commands to read or transmit the log, treat it as suspicious and stop installation.

Like a lobster shell, security has layers — review code before you run it.

latestvk9741cgmh4a9zzm3pv43a5wmdh84g38y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments