Audit Trail Logs

• Analyzed: May 11, 2026, 6:32 AM
• Findings: 1
• Version: 1.0.0
• Hash: 837d4ea8b51ea5565a2cebd401968f40aac21dccb97f6aa7a6743ecb75fad01b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle's primary function is to instruct the OpenClaw agent to install and use a specific third-party NPM package, 'orbcafe-ui', for handling sensitive 'Audit Trail Logs' (SKILL.md). This pattern represents a supply chain risk, as it encourages the execution of unverified external code without providing any internal logic or security validation, which is a common vector for dependency-based attacks.