Analytics Platform Base

• Verdict: Pass
• Confidence: High
• Analyzed: May 1, 2026, 7:10 AM
• Findings: 1
• Version: 1.0.0

Overview

This is a simple instruction-only React UI skill that recommends installing a relevant UI package and using one component; no harmful behavior is evidenced.

This skill appears safe and narrowly scoped. Before installing, verify that the orbcafe-ui package is the intended library and use a pinned version if your project requires reproducible builds.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteHigh Confidence

What this means

Installing the dependency will add third-party code to the user's project.

Why it was flagged

The skill instructs the user to install an external npm package without a pinned version. This is expected for a UI-library integration, but it introduces normal package supply-chain considerations.

Skill content

npm install orbcafe-ui
# or
pnpm add orbcafe-ui

Recommendation

Review the npm package, its publisher, version, and dependency tree before installing it in a sensitive project.