orbcafe-agentui-chat
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This instruction-only skill is coherent for building ORBCAFE chat UI components, with only normal npm setup risks to notice.
This appears safe to use as documentation for building ORBCAFE chat UI. Before installing, make sure you trust the npm packages and run the setup commands only inside the project where you intend to add the chat components.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If followed, the setup can add or update frontend dependencies and run local project scripts.
The skill asks the user to install external npm packages and also documents local npm build/dev commands. This is normal for a UI component integration skill, but it changes the local project environment and depends on package provenance.
npm install orbcafe-ui @mui/material @mui/icons-material @mui/x-date-pickers @emotion/react @emotion/styled dayjs
Run the commands only in the intended project, review package names and versions, and prefer using an existing lockfile or pinned versions when possible.