Chatbot Personality Set
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This is a small instruction-only skill that shows how to install and use a React UI package, with no evidence of hidden behavior or sensitive access.
Before installing, confirm that the orbcafe-ui npm package is the package you intend to use and consider pinning its version. No suspicious behavior is evident in the provided artifact.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the package adds third-party code to the user’s project, so changes in that package could affect the application.
The skill relies on installing a third-party npm package and does not pin a package version. This is purpose-aligned for a React UI example, but users should verify the dependency before installing.
npm install orbcafe-ui # or pnpm add orbcafe-ui
Verify the npm package source and reputation, review its documentation, and consider pinning a known-good version in production projects.